From patchwork Thu Sep 26 11:22:02 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "ralf_lici (Code Review)" X-Patchwork-Id: 3878 Return-Path: Delivered-To: patchwork@openvpn.net Received: by 2002:a05:7000:6c93:b0:5b9:581e:f939 with SMTP id p19csp842799may; Thu, 26 Sep 2024 04:22:32 -0700 (PDT) X-Forwarded-Encrypted: i=2; AJvYcCWTDSegcCN6aNK4k9gugZzy9BH6pmuFAl1skfXjYw5anPoO1/XhRbM5gBsyyObDAdj/+s+/eDc+f0c=@openvpn.net X-Google-Smtp-Source: AGHT+IFrdGm7epfbIZBWwoJ1XhLygCt8Vemhl4U/5fDoqX51+TVDHTw/bd4q6TTQYPHpcS1AQusT X-Received: by 2002:a05:6602:6b09:b0:82b:c712:cc0d with SMTP id ca18e2360f4ac-83247e74304mr519088039f.15.1727349752523; Thu, 26 Sep 2024 04:22:32 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1727349752; cv=none; d=google.com; s=arc-20240605; b=ah3znQB1+2prtu5qWtBxq5yRb0Xsbq8FmduEqxwh+5oAPNq2ZhvgZaMHhBi/4VgCU/ 2iR9oSCQGur+6ubsou31jJ4O6IbVYucqAc6Q7l7wt7s4JS+qg2Pd6i4F/TYJ+UJdPc/F p/+bzfC7b+BGDRcMXZvMvZbSqbBXAq2Eaf1HaeoJT8kFFJ8QWrQezRl3COekSPrq4rzb phYta78o76CPPOMoiF+yFvDb+JjTxS6oCqtWme4l8NaUNp5ks2RtStmZ7ukZWd7znhNV +zAOP9WUdRG1/iy5YCFVowmCqOdmU4X3SnEfiwODW4fC8QQ/tMjiiJ9Vxq7gTobqRo8I JDgg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=errors-to:cc:reply-to:list-subscribe:list-help:list-post :list-archive:list-unsubscribe:list-id:precedence:subject:user-agent :mime-version:message-id:references:auto-submitted:to:date:from :dkim-signature:dkim-signature:dkim-signature; bh=dc3wRvnWLvbuIZqNBvjHyK47WvxXoc5LXVItLmiP6cY=; fh=GFP4qDxgyJ2WEPo/oeLZg3Mj4NqvY1j2nTvTt7psNwg=; b=ctfoa35auajfNmZKsEaUYoKp67QQYsShqRk6XlVGnGtQmcfic2wiAD9hem7ja6bLyv NeqKDg2mld2VZXY4u8zB2jsy70KZ6eMvOTuyI3t9xUQ2JjQ4E7XCSveorz1ixPIJqw9V eDanxvmKyiDV1DCGNZPGoAv64cjbxwFVpSbG3ed/fAQABleXFMy+A0rn3xS/vYmCTM0k vGWCZU7A9e1uY1LH6964VUukotXUhUp736EYtEIUf47kYD8nJLrE0tmyAAavS7UFyJXp fUHTyPvnLwIjskB6mak4pJttyoogJel/AMnFlGYfcxvIAbJcbfQnUQWx3YK5Qqumyvwq kgzQ==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=XkLgU3W7; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=gus66fR9; dkim=neutral (body hash did not verify) header.i=@openvpn.net header.s=google header.b=WSmts+So; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=openvpn.net; dara=fail header.i=@openvpn.net Received: from lists.sourceforge.net (lists.sourceforge.net. [216.105.38.7]) by mx.google.com with ESMTPS id ca18e2360f4ac-8323f5f5f7asi259088839f.50.2024.09.26.04.22.31 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 26 Sep 2024 04:22:32 -0700 (PDT) Received-SPF: pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) client-ip=216.105.38.7; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=XkLgU3W7; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=gus66fR9; dkim=neutral (body hash did not verify) header.i=@openvpn.net header.s=google header.b=WSmts+So; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=openvpn.net; dara=fail header.i=@openvpn.net Received: from [127.0.0.1] (helo=sfs-ml-1.v29.lw.sourceforge.com) by sfs-ml-1.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1stmZd-0004vv-O9; Thu, 26 Sep 2024 11:22:18 +0000 Received: from [172.30.29.66] (helo=mx.sourceforge.net) by sfs-ml-1.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1stmZc-0004vk-8N for openvpn-devel@lists.sourceforge.net; Thu, 26 Sep 2024 11:22:17 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Content-Type:Content-Transfer-Encoding:MIME-Version :Message-ID:Reply-To:References:Subject:List-Unsubscribe:List-Id:Cc:To:Date: From:Sender:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:List-Help: List-Subscribe:List-Post:List-Owner:List-Archive; bh=FCzc2Jq19oRuFTBWB933aMoPj9gOpa+nTh91g0I2Pw0=; b=XkLgU3W7YoXWHBShj5xozOfUBH BtOI4G8eFOZ4GqBbNgRV4ochkM7uLAsdFj5BNfNLpLOxcx8SpB99mMUdQzyBU0Czgn9F+fnozMPdM XnX0cLE/B8P6AiKu0Syq3fY5EW00hQKdK0sFsRTzvprtd87oYneol5sLVaSQ8ADI410M=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Content-Type:Content-Transfer-Encoding:MIME-Version:Message-ID:Reply-To: References:Subject:List-Unsubscribe:List-Id:Cc:To:Date:From:Sender:Content-ID :Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To: Resent-Cc:Resent-Message-ID:In-Reply-To:List-Help:List-Subscribe:List-Post: List-Owner:List-Archive; bh=FCzc2Jq19oRuFTBWB933aMoPj9gOpa+nTh91g0I2Pw0=; b=g us66fR9U3BFo10PQ6f+ikc8NrwRyB4i+wq1dSXogUeSzADZ1YTDF2dsYiDRcpFhNqBkyEtxjtJ99V zXQW34QblI5wPyi5lWfzDH80yGeGdcEmjt0kp9UqzKVfwxFQjr4lM5vW8UlqmxAo33Er3uHwGlKoO /YMYgIEBSv9Adt84=; Received: from mail-wm1-f45.google.com ([209.85.128.45]) by sfi-mx-2.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.95) id 1stmZb-0005gS-22 for openvpn-devel@lists.sourceforge.net; Thu, 26 Sep 2024 11:22:16 +0000 Received: by mail-wm1-f45.google.com with SMTP id 5b1f17b1804b1-42cd74c0d16so7920545e9.1 for ; Thu, 26 Sep 2024 04:22:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=openvpn.net; s=google; t=1727349723; x=1727954523; darn=lists.sourceforge.net; h=user-agent:content-disposition:content-transfer-encoding :mime-version:message-id:reply-to:references:subject :list-unsubscribe:list-id:auto-submitted:cc:to:date:from:from:to:cc :subject:date:message-id:reply-to; bh=FCzc2Jq19oRuFTBWB933aMoPj9gOpa+nTh91g0I2Pw0=; b=WSmts+SoRl564ua6A9C4sWKegk4YWY6zPBw+vinxjY562/Mi2+xY/PDa7CUD8Fl+I+ W1i4VeqoUPJPObIN7SnNsz7jf5vou5IZJXX8JZm2EKorF70z6DRpI1HUUA97gW7UQ0+f yfMBsGhSJkkZoRuscoJzNM+0P+oN7rMM1dJ0CZmFAZ/nCNJzgjlUlSynCIIvbo5G1enM ZmCkXmQBAoAFbjIHiDWK5wMBX6Oa5wOhz+mKJ3zaO13067+Uc0mr2/B4MHNtHgtLpX0W AXYy5ewPqsXE04eH3VYKn1PMZhYJ1RPiq+PQEazLMMHkoytSAU1Y5n3k3GC/u2nSlNLC 5nTw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1727349723; x=1727954523; h=user-agent:content-disposition:content-transfer-encoding :mime-version:message-id:reply-to:references:subject :list-unsubscribe:list-id:auto-submitted:cc:to:date:from :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=FCzc2Jq19oRuFTBWB933aMoPj9gOpa+nTh91g0I2Pw0=; b=eAlenrbZtViWLhfm5enVaFWhE3nLicA0JHL4C33wIpGhEjYXLldcdWuYhAgyE41YJz TtXdUf41mMsi1s4aysb//lTfUmDUEWLD+XeLf5FqQ4J4h4K+PZ8l8YzGt3+w8gX3hYlx RFGrdM2/nKLY950E+71C8Fz153YGNs6b7gPuXjM4GKLLaNVgTBluQnMKghUYYZB7XhdM jFTFXCjHM6qDW1bT9ld2CTnk/PojXbihzQxxBAdeJXVvhHwzrNJqCCdsWsXPHtEaNZYw 9ceVb4eyGph1hDwAHrLKa44D8s/3GTbh/QsiV3FiDj1x5+iKUcksUGAual/Te9wpzq3b mfSA== X-Gm-Message-State: AOJu0YwjHorkDGSZk5yZTLNa4mL+YCqDq9xhvgZvNJIwP2wxpTD9c5RD Ld/E6PHTD+ejh0tpOCusBP0i4RTcRUaQXVEuS618asuNT6cEKmW9Q+xqZf5N9fBpZsJ9kUD2EnL p X-Received: by 2002:a05:600c:1c0d:b0:42c:b220:4778 with SMTP id 5b1f17b1804b1-42e9624123dmr45510085e9.33.1727349723195; Thu, 26 Sep 2024 04:22:03 -0700 (PDT) Received: from gerrit.openvpn.in (ec2-18-159-0-78.eu-central-1.compute.amazonaws.com. [18.159.0.78]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-37cbc2c1ef1sm6274192f8f.35.2024.09.26.04.22.02 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 26 Sep 2024 04:22:02 -0700 (PDT) From: "flichtenheld (Code Review)" X-Google-Original-From: "flichtenheld (Code Review)" X-Gerrit-PatchSet: 1 Date: Thu, 26 Sep 2024 11:22:02 +0000 To: plaisthos Auto-Submitted: auto-generated X-Gerrit-MessageType: newchange X-Gerrit-Change-Id: I92dfbc3a0cc347a51892600bf02b501295ce612b X-Gerrit-Change-Number: 773 X-Gerrit-Project: openvpn X-Gerrit-ChangeURL: X-Gerrit-Commit: 511f7b16b0ce149f874d386979a8f650e442c312 References: Message-ID: <4567ca1543a3a33e63ac5264eb64974503beaa9b-HTML@gerrit.openvpn.net> MIME-Version: 1.0 User-Agent: Gerrit/3.8.2 X-Spam-Score: -1.2 (-) X-Spam-Report: Spam detection software, running on the system "util-spamd-2.v13.lw.sourceforge.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Attention is currently required from: plaisthos. Hello plaisthos, I'd like you to do a code review. Please visit Content analysis details: (-1.2 points, 6.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [209.85.128.45 listed in wl.mailspike.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.0 WEIRD_PORT URI: Uses non-standard port number for HTTP 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted Colors in HTML X-Headers-End: 1stmZb-0005gS-22 Subject: [Openvpn-devel] [M] Change in openvpn[master]: GHA: Pin dependencies X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: frank@lichtenheld.com, arne-openvpn@rfc2549.org, openvpn-devel@lists.sourceforge.net Cc: openvpn-devel Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox X-GMAIL-THRID: =?utf-8?q?1811257494119968341?= X-GMAIL-MSGID: =?utf-8?q?1811257494119968341?= X-getmail-filter-classifier: gerrit message type newchange Attention is currently required from: plaisthos. Hello plaisthos, I'd like you to do a code review. Please visit http://gerrit.openvpn.net/c/openvpn/+/773?usp=email to review the following change. Change subject: GHA: Pin dependencies ...................................................................... GHA: Pin dependencies Done by renovate. Updates will also be handled by renovate. This makes the builds slightly more deterministic and removes some potential supply-chain attack vectors. GitHub: #610 Change-Id: I92dfbc3a0cc347a51892600bf02b501295ce612b Signed-off-by: Frank Lichtenheld --- M .github/workflows/build.yaml M .github/workflows/coverity-scan.yml 2 files changed, 25 insertions(+), 25 deletions(-) git pull ssh://gerrit.openvpn.net:29418/openvpn refs/changes/73/773/1 diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 361d457..1bc250d 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -13,7 +13,7 @@ - name: Install dependencies run: sudo apt update && sudo apt install -y uncrustify - name: Checkout OpenVPN - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 with: path: openvpn - name: Show uncrustify version @@ -27,7 +27,7 @@ - name: Show changes on standard output run: git diff working-directory: openvpn - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4 with: name: uncrustify-changes.patch path: 'openvpn/uncrustify-changes.patch' @@ -49,22 +49,22 @@ - name: Install dependencies run: sudo apt update && sudo apt install -y mingw-w64 unzip cmake ninja-build build-essential wget python3-docutils man2html-base - name: Checkout OpenVPN - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - name: Restore from cache and install vcpkg - uses: lukka/run-vcpkg@v11.5 + uses: lukka/run-vcpkg@5e0cab206a5ea620130caf672fce3e4a6b5666a1 # v11.5 with: vcpkgGitCommitId: 8d3649ba34aab36914ddd897958599aa0a91b08e vcpkgJsonGlob: '**/mingw/vcpkg.json' - name: Run CMake with vcpkg.json manifest - uses: lukka/run-cmake@v10.7 + uses: lukka/run-cmake@af1be47fd7c933593f687731bc6fdbee024d3ff4 # v10.8 with: configurePreset: mingw-${{ matrix.arch }} buildPreset: mingw-${{ matrix.arch }} buildPresetAdditionalArgs: "['--config Debug']" - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4 with: name: openvpn-mingw-${{ matrix.arch }} path: | @@ -72,7 +72,7 @@ ${{ github.workspace }}/out/build/mingw/${{ matrix.arch }}/Debug/*.dll !${{ github.workspace }}/out/build/mingw/${{ matrix.arch }}/Debug/test_*.exe - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4 with: name: openvpn-mingw-${{ matrix.arch }}-tests path: | @@ -91,9 +91,9 @@ name: "mingw unittest ${{ matrix.test }} - ${{ matrix.arch }} - OSSL" steps: - name: Checkout OpenVPN - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - name: Retrieve mingw unittest - uses: actions/download-artifact@v4 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4 with: name: openvpn-mingw-${{ matrix.arch }}-tests path: unittests @@ -165,7 +165,7 @@ - name: Install dependencies run: sudo apt update && sudo apt install -y liblzo2-dev libpam0g-dev liblz4-dev libcap-ng-dev libnl-genl-3-dev linux-libc-dev man2html libcmocka-dev python3-docutils libtool automake autoconf ${SSLPKG} ${PKCS11PKG} - name: Checkout OpenVPN - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - name: autoconf run: autoreconf -fvi - name: configure @@ -195,7 +195,7 @@ - name: Install dependencies run: sudo apt update && sudo apt install -y liblzo2-dev libpam0g-dev liblz4-dev libcap-ng-dev libnl-genl-3-dev linux-libc-dev man2html clang libcmocka-dev python3-docutils libtool automake autoconf libmbedtls-dev - name: Checkout OpenVPN - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - name: autoconf run: autoreconf -fvi - name: configure @@ -256,7 +256,7 @@ - name: Install dependencies run: brew install openssl@1.1 openssl@3 lzo lz4 man2html cmocka libtool automake autoconf libressl - name: Checkout OpenVPN - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - name: autoconf run: autoreconf -fvi - name: configure @@ -280,27 +280,27 @@ runs-on: windows-latest steps: - - uses: actions/checkout@v4 - - uses: lukka/get-cmake@v3.30.1 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + - uses: lukka/get-cmake@070a0507a7abe157ef918deec391da1be197d2d1 # v3.30.3 - name: Install rst2html run: python -m pip install --upgrade pip docutils - name: Restore artifacts, or setup vcpkg (do not install any package) - uses: lukka/run-vcpkg@v11.5 + uses: lukka/run-vcpkg@5e0cab206a5ea620130caf672fce3e4a6b5666a1 # v11.5 with: vcpkgGitCommitId: 8d3649ba34aab36914ddd897958599aa0a91b08e vcpkgJsonGlob: '**/windows/vcpkg.json' - name: Run CMake with vcpkg.json manifest (NO TESTS) - uses: lukka/run-cmake@v10.7 + uses: lukka/run-cmake@af1be47fd7c933593f687731bc6fdbee024d3ff4 # v10.8 if: ${{ matrix.arch == 'arm64' }} with: configurePreset: win-${{ matrix.arch }}-release buildPreset: win-${{ matrix.arch }}-release - name: Run CMake with vcpkg.json manifest - uses: lukka/run-cmake@v10.7 + uses: lukka/run-cmake@af1be47fd7c933593f687731bc6fdbee024d3ff4 # v10.8 if: ${{ matrix.arch != 'arm64' }} with: configurePreset: win-${{ matrix.arch }}-release @@ -308,7 +308,7 @@ testPreset: win-${{ matrix.arch }}-release testPresetAdditionalArgs: "['--output-on-failure']" - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4 with: name: openvpn-msvc-${{ matrix.arch }} path: | @@ -348,7 +348,7 @@ - name: Install dependencies run: sudo apt update && sudo apt install -y liblzo2-dev libpam0g-dev liblz4-dev linux-libc-dev man2html clang libcmocka-dev python3-docutils libtool automake autoconf pkg-config libcap-ng-dev libnl-genl-3-dev - name: "libressl: checkout" - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 with: path: libressl # versioning=semver-coerced @@ -369,7 +369,7 @@ - name: "ldconfig" run: sudo ldconfig - name: Checkout OpenVPN - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - name: autoconf run: autoreconf -fvi - name: configure @@ -410,7 +410,7 @@ - name: Install dependencies run: sudo apt update && sudo apt install -y liblzo2-dev libpam0g-dev liblz4-dev linux-libc-dev man2html clang libcmocka-dev python3-docutils python3-jinja2 python3-jsonschema libtool automake autoconf pkg-config libcap-ng-dev libnl-genl-3-dev - name: "mbedtls: checkout" - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 with: path: mbedtls submodules: true @@ -424,7 +424,7 @@ run: sudo make install DESTDIR=/usr working-directory: mbedtls - name: Checkout OpenVPN - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - name: autoconf run: autoreconf -fvi - name: configure diff --git a/.github/workflows/coverity-scan.yml b/.github/workflows/coverity-scan.yml index 37b8102..16c979d 100644 --- a/.github/workflows/coverity-scan.yml +++ b/.github/workflows/coverity-scan.yml @@ -13,7 +13,7 @@ steps: - name: Check submission cache id: check_submit - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: | cov-int @@ -25,7 +25,7 @@ - name: Checkout OpenVPN if: steps.check_submit.outputs.cache-hit != 'true' - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - name: Download Coverity Build Tool if: steps.check_submit.outputs.cache-hit != 'true' @@ -65,7 +65,7 @@ - name: Cache submission if: steps.check_submit.outputs.cache-hit != 'true' - uses: actions/cache/save@v4 + uses: actions/cache/save@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: | cov-int