From a08fec76a0a57c645531ef9f4bd598b343fc7898 Mon Sep 17 00:00:00 2001 From: MacOS Date: Fri, 17 Jul 2026 11:56:58 +0200 Subject: [PATCH 1/3] build(native-cpu-multiarch-workflow): pin checkout action with commit hash --- .github/workflows/native-cpu-multiarch.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/native-cpu-multiarch.yml b/.github/workflows/native-cpu-multiarch.yml index d0e6b8a9..01bfdaf8 100644 --- a/.github/workflows/native-cpu-multiarch.yml +++ b/.github/workflows/native-cpu-multiarch.yml @@ -55,7 +55,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Copy CI gradle.properties (Unix) if: runner.os != 'Windows' From ff3ded164ce05811e5e6bb81ae864575046d353f Mon Sep 17 00:00:00 2001 From: MacOS Date: Fri, 17 Jul 2026 11:58:13 +0200 Subject: [PATCH 2/3] build(native-cpu-multiarch-workflow): pin setup-java action with commit hash --- .github/workflows/native-cpu-multiarch.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/native-cpu-multiarch.yml b/.github/workflows/native-cpu-multiarch.yml index 01bfdaf8..f6c6a068 100644 --- a/.github/workflows/native-cpu-multiarch.yml +++ b/.github/workflows/native-cpu-multiarch.yml @@ -71,7 +71,7 @@ jobs: Copy-Item .github\ci-gradle.properties "$HOME\.gradle\gradle.properties" - name: Set up JDK 25 - uses: actions/setup-java@v5 + uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0 with: distribution: 'zulu' java-version: 25 From b93ab75ff5c7e8211fcb83a816f1b7ae2f9058dc Mon Sep 17 00:00:00 2001 From: MacOS Date: Fri, 17 Jul 2026 11:59:20 +0200 Subject: [PATCH 3/3] build(native-cpu-multiarch-workflow): pin upload-artifact action with commit hash --- .github/workflows/native-cpu-multiarch.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/native-cpu-multiarch.yml b/.github/workflows/native-cpu-multiarch.yml index f6c6a068..fc5d887c 100644 --- a/.github/workflows/native-cpu-multiarch.yml +++ b/.github/workflows/native-cpu-multiarch.yml @@ -100,7 +100,7 @@ jobs: - name: Upload native library if: success() - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: libskainet_kernels-${{ matrix.arch_label }} path: skainet-backends/skainet-backend-native-cpu/build/native/resources/native/${{ matrix.arch_label }}/${{ matrix.lib_name }} @@ -109,7 +109,7 @@ jobs: - name: Upload test reports if: always() - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: native-cpu-test-reports-${{ matrix.arch_label }} path: |