Pin action/checkout action (#901)

Pins as suggested by OpenSSF Scorecard, see https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies.
nod-ai · Jan 21, 2025 · 0d9cbc8 · 0d9cbc8
1 parent d551ab1
commit 0d9cbc8
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 7 deletions.
diff --git a/.github/workflows/test_models.yml b/.github/workflows/test_models.yml
@@ -39,10 +39,10 @@ jobs:
       #     python-version: ${{matrix.version}}
 
       - name: "Checkout This Repo"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: "Checkout iree-turbine"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: iree-org/iree-turbine
           # TODO: Let the ref be passed as a parameter to run integration tests.

diff --git a/.github/workflows/test_sdxl.yml b/.github/workflows/test_sdxl.yml
@@ -31,18 +31,18 @@ jobs:
           python-version: ${{matrix.version}}
 
       - name: "Checkout SHARK-ModelDev"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: bump-punet-tom
 
       - name: "Checkout iree-turbine"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: iree-org/iree-turbine
           path: iree-turbine
 
       - name: "Checkout iree"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: iree-org/iree
           path: iree

diff --git a/.github/workflows/test_shark.yml b/.github/workflows/test_shark.yml
@@ -30,14 +30,14 @@ jobs:
           python-version: ${{matrix.version}}
 
       - name: "Checkout SHARK"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: "nod-ai/SHARK.git"
           path: SHARK
           ref: "main"
 
       - name: "Checkout iree-turbine"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: iree-org/iree-turbine
           # TODO: Let the ref be passed as a parameter to run integration tests.