From 28ebbccbf1e28a10b9706e9a26b4fdc387fbd8e1 Mon Sep 17 00:00:00 2001 From: Vince Grassia <593223+vgrassia@users.noreply.github.com> Date: Tue, 18 May 2021 09:21:26 -0400 Subject: [PATCH] Pin versions of actions in workflow (#901) --- .github/workflows/build.yml | 57 +++++++++++++++++------------------ .github/workflows/deploy.yml | 18 +++++------ .github/workflows/release.yml | 47 ++++++++++++++--------------- 3 files changed, 60 insertions(+), 62 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 3cc1d75b..542f911c 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -13,7 +13,7 @@ jobs: steps: - name: Checkout repo - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f - name: Set up cloc run: | @@ -28,9 +28,9 @@ jobs: steps: - name: Set up Node - uses: actions/setup-node@v1 + uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea with: - node-version: '14.x' + node-version: '14' - name: Set Node options run: echo "NODE_OPTIONS=--max_old_space_size=4096" >> $GITHUB_ENV @@ -52,7 +52,7 @@ jobs: snapcraft --version || echo 'snapcraft unavailable' - name: Checkout repo - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f - name: Load package version run: ./.github/scripts/load-version.ps1 @@ -69,35 +69,35 @@ jobs: - name: Upload .deb artifact if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@ee69f02b3dfdecd58bb31b4d133da38ba6fe3700 with: name: Bitwarden-${{ env.PACKAGE_VERSION }}-amd64.deb path: ./dist/Bitwarden-${{ env.PACKAGE_VERSION }}-amd64.deb - name: Upload .rpm artifact if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@ee69f02b3dfdecd58bb31b4d133da38ba6fe3700 with: name: Bitwarden-${{ env.PACKAGE_VERSION }}-x86_64.rpm path: ./dist/Bitwarden-${{ env.PACKAGE_VERSION }}-x86_64.rpm - name: Upload .freebsd artifact if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@ee69f02b3dfdecd58bb31b4d133da38ba6fe3700 with: name: Bitwarden-${{ env.PACKAGE_VERSION }}-x64.freebsd path: ./dist/Bitwarden-${{ env.PACKAGE_VERSION }}-x64.freebsd - name: Upload .snap artifact if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@ee69f02b3dfdecd58bb31b4d133da38ba6fe3700 with: name: bitwarden_${{ env.PACKAGE_VERSION }}_amd64.snap path: ./dist/bitwarden_${{ env.PACKAGE_VERSION }}_amd64.snap - name: Upload .AppImage artifact if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@ee69f02b3dfdecd58bb31b4d133da38ba6fe3700 with: name: Bitwarden-${{ env.PACKAGE_VERSION }}-x86_64.AppImage path: ./dist/Bitwarden-${{ env.PACKAGE_VERSION }}-x86_64.AppImage @@ -107,14 +107,14 @@ jobs: runs-on: windows-latest steps: - name: Set up dotnet - uses: actions/setup-dotnet@v1 + uses: actions/setup-dotnet@a71d1eb2c86af85faa8c772c03fb365e377e45ea with: dotnet-version: "3.1.x" - name: Set up Node - uses: actions/setup-node@v1 + uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea with: - node-version: '14.x' + node-version: '14' - name: Set Node options run: echo "NODE_OPTIONS=--max_old_space_size=4096" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append @@ -152,7 +152,7 @@ jobs: choco --version - name: Checkout repo - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f - name: Load package version run: ./.github/scripts/load-version.ps1 @@ -199,42 +199,42 @@ jobs: - name: Upload portable exe artifact if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@ee69f02b3dfdecd58bb31b4d133da38ba6fe3700 with: name: Bitwarden-Portable-${{ env.PACKAGE_VERSION }}.exe path: ./dist/Bitwarden-Portable-${{ env.PACKAGE_VERSION }}.exe - name: Upload installer exe artifact if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@ee69f02b3dfdecd58bb31b4d133da38ba6fe3700 with: name: Bitwarden-Installer-${{ env.PACKAGE_VERSION }}.exe path: ./dist/nsis-web/Bitwarden-Installer-${{ env.PACKAGE_VERSION }}.exe - name: Upload store appx ia32 artifact if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@ee69f02b3dfdecd58bb31b4d133da38ba6fe3700 with: name: Bitwarden-${{ env.PACKAGE_VERSION }}-ia32-store.appx path: ./dist/Bitwarden-${{ env.PACKAGE_VERSION }}-ia32-store.appx - name: Upload store appx x64 artifact if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@ee69f02b3dfdecd58bb31b4d133da38ba6fe3700 with: name: Bitwarden-${{ env.PACKAGE_VERSION }}-x64-store.appx path: ./dist/Bitwarden-${{ env.PACKAGE_VERSION }}-x64-store.appx - name: Upload store appx ARM64 artifact if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@ee69f02b3dfdecd58bb31b4d133da38ba6fe3700 with: name: Bitwarden-${{ env.PACKAGE_VERSION }}-arm64-store.appx path: ./dist/Bitwarden-${{ env.PACKAGE_VERSION }}-arm64-store.appx - name: Upload nupkg artifact if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@ee69f02b3dfdecd58bb31b4d133da38ba6fe3700 with: name: bitwarden.${{ env.PACKAGE_VERSION }}.nupkg path: ./dist/chocolatey/bitwarden.${{ env.PACKAGE_VERSION }}.nupkg @@ -243,9 +243,9 @@ jobs: runs-on: macos-latest steps: - name: Set up Node - uses: actions/setup-node@v1 + uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea with: - node-version: '14.x' + node-version: '14' - name: Set Node options run: echo "NODE_OPTIONS=--max_old_space_size=4096" >> $GITHUB_ENV @@ -254,15 +254,14 @@ jobs: run: | node --version npm --version - Write-Output "GitHub ref: $env:GITHUB_REF" - Write-Output "GitHub event: $env:GITHUB_EVENT" - shell: pwsh + echo "GitHub ref: $GITHUB_REF" + echo "GitHub event: $GITHUB_EVENT" env: GITHUB_REF: ${{ github.ref }} GITHUB_EVENT: ${{ github.event_name }} - name: Checkout repo - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f - name: Decrypt secrets run: ./.github/scripts/macos/decrypt-secrets.ps1 @@ -306,7 +305,7 @@ jobs: - name: Checkout browser extension if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f with: repository: 'bitwarden/browser' path: 'dist-safari/browser' @@ -334,14 +333,14 @@ jobs: - name: Upload .zip artifact if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@ee69f02b3dfdecd58bb31b4d133da38ba6fe3700 with: name: Bitwarden-${{ env.PACKAGE_VERSION }}-mac.zip path: ./dist/Bitwarden-${{ env.PACKAGE_VERSION }}-mac.zip - name: Upload .dmg artifact if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@ee69f02b3dfdecd58bb31b4d133da38ba6fe3700 with: name: Bitwarden-${{ env.PACKAGE_VERSION }}.dmg path: ./dist/Bitwarden-${{ env.PACKAGE_VERSION }}.dmg @@ -360,7 +359,7 @@ jobs: - name: Upload .pkg artifact if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/rc' - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@ee69f02b3dfdecd58bb31b4d133da38ba6fe3700 with: name: Bitwarden-${{ env.PACKAGE_VERSION }}-universal.pkg path: ./dist/mas-universal/Bitwarden-${{ env.PACKAGE_VERSION }}-universal.pkg diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 7bc1a8c8..50cdd3bc 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -19,7 +19,7 @@ jobs: tag_version: ${{ steps.create_tags.outputs.tag_version }} steps: - name: Checkout Repo - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f - name: Create Deploy version vars id: create_tags @@ -62,10 +62,10 @@ jobs: TAG_VERSION: ${{ needs.setup.outputs.tag_version }} steps: - name: Checkout Repo - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f - name: Install Snap - uses: samuelmeuli/action-snapcraft@v1 + uses: samuelmeuli/action-snapcraft@10d7d0a84d9d86098b19f872257df314b0bd8e2d with: snapcraft_token: ${{ secrets.SNAP_TOKEN }} @@ -73,7 +73,7 @@ jobs: run: mkdir dist - name: get snap package - uses: Xotl/cool-github-releases@v1 + uses: Xotl/cool-github-releases@16c58a5863d6ba9944f63ca8bb78bb3249ce1d81 with: mode: download tag_name: ${{ env.TAG_VERSION }} @@ -98,10 +98,10 @@ jobs: TAG_VERSION: ${{ needs.setup.outputs.tag_version }} steps: - name: Checkout Repo - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f - name: Get choco release asset - uses: Xotl/cool-github-releases@v1 + uses: Xotl/cool-github-releases@16c58a5863d6ba9944f63ca8bb78bb3249ce1d81 with: mode: download tag_name: ${{ env.TAG_VERSION }} @@ -118,7 +118,7 @@ jobs: run: New-Item -ItemType directory -Path ./dist - name: Get nupkg - uses: Xotl/cool-github-releases@v1 + uses: Xotl/cool-github-releases@16c58a5863d6ba9944f63ca8bb78bb3249ce1d81 with: mode: download tag_name: ${{ env.TAG_VERSION }} @@ -140,13 +140,13 @@ jobs: TAG_VERSION: ${{ needs.setup.outputs.tag_version }} steps: - name: Checkout repo - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f - name: make target directory run: mkdir -p dist/mas-universal - name: Get mac release asset - uses: Xotl/cool-github-releases@v1 + uses: Xotl/cool-github-releases@16c58a5863d6ba9944f63ca8bb78bb3249ce1d81 with: mode: download tag_name: ${{ env.TAG_VERSION }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a01bab07..aa9b27e9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -18,7 +18,7 @@ jobs: release_upload_url: ${{ steps.create_release.outputs.upload_url }} steps: - name: Checkout repo - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f - name: Create Release Vars id: create_tags @@ -41,7 +41,7 @@ jobs: - name: Create Draft Release id: create_release - uses: actions/create-release@v1 + uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: @@ -56,9 +56,9 @@ jobs: needs: setup steps: - name: Set up Node - uses: actions/setup-node@v1 + uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea with: - node-version: '14.x' + node-version: '14' - name: Set Node options run: echo "NODE_OPTIONS=--max_old_space_size=4096" >> $GITHUB_ENV @@ -74,7 +74,7 @@ jobs: npm --version - name: Checkout repo - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f - name: Load package version run: ./.github/scripts/load-version.ps1 @@ -97,14 +97,14 @@ jobs: needs: setup steps: - name: Set up dotnet - uses: actions/setup-dotnet@v1 + uses: actions/setup-dotnet@a71d1eb2c86af85faa8c772c03fb365e377e45ea with: dotnet-version: "3.1.x" - name: Set up Node - uses: actions/setup-node@v1 + uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea with: - node-version: '14.x' + node-version: '14' - name: Set Node options run: echo "NODE_OPTIONS=--max_old_space_size=4096" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append @@ -145,7 +145,7 @@ jobs: choco --version - name: Checkout repo - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f - name: Load package version run: ./.github/scripts/load-version.ps1 @@ -182,7 +182,7 @@ jobs: cd ./dist/chocolatey - name: Upload Chocolatey nupkg release asset - uses: actions/upload-release-asset@v1 + uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: @@ -197,9 +197,9 @@ jobs: needs: setup steps: - name: Set up Node - uses: actions/setup-node@v1 + uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea with: - node-version: '14.x' + node-version: '14' - name: Set Node options run: echo "NODE_OPTIONS=--max_old_space_size=4096" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append @@ -217,7 +217,7 @@ jobs: choco --version - name: Checkout repo - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f - name: Load package version run: ./.github/scripts/load-version.ps1 @@ -233,7 +233,7 @@ jobs: run: npm run dist:win:ci - name: Upload unsigned ia32 Windows Store release asset - uses: actions/upload-release-asset@v1 + uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: @@ -243,7 +243,7 @@ jobs: asset_content_type: application - name: Upload unsigned x64 Windows Store release asset - uses: actions/upload-release-asset@v1 + uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: @@ -253,7 +253,7 @@ jobs: asset_content_type: application - name: Upload unsigned ARM64 Windows Store release asset - uses: actions/upload-release-asset@v1 + uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: @@ -267,9 +267,9 @@ jobs: needs: setup steps: - name: Set up Node - uses: actions/setup-node@v1 + uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea with: - node-version: '14.x' + node-version: '14' - name: Set Node options run: echo "NODE_OPTIONS=--max_old_space_size=4096" >> $GITHUB_ENV @@ -278,15 +278,14 @@ jobs: run: | node --version npm --version - Write-Output "GitHub ref: $env:GITHUB_REF" - Write-Output "GitHub event: $env:GITHUB_EVENT" - shell: pwsh + echo "GitHub ref: $GITHUB_REF" + echo "GitHub event: $GITHUB_EVENT" env: GITHUB_REF: ${{ github.ref }} GITHUB_EVENT: ${{ github.event_name }} - name: Checkout repo - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f - name: Decrypt secrets run: ./.github/scripts/macos/decrypt-secrets.ps1 @@ -328,7 +327,7 @@ jobs: run: New-Item ./dist-safari -ItemType Directory -ea 0 - name: Checkout browser extension - uses: actions/checkout@v2 + uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f with: repository: 'bitwarden/browser' ref: ${{ github.event.inputs.browser_extension_ref }} @@ -360,7 +359,7 @@ jobs: APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }} - name: Upload Apple Store release asset - uses: actions/upload-release-asset@v1 + uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: