This is an automated email from the ASF dual-hosted git repository.
wgtmac pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg-cpp.git
The following commit(s) were added to refs/heads/main by this push:
new 4550ec8a CI: Use specific patch versions in workflow action comments
(#644)
4550ec8a is described below
commit 4550ec8ad2dbaf341a7a61b2d1feb605c3e52689
Author: Kevin Liu <[email protected]>
AuthorDate: Thu May 7 01:54:49 2026 -0400
CI: Use specific patch versions in workflow action comments (#644)
Similar to https://github.com/apache/iceberg/pull/16229
The workflow files use SHA-pinned actions (immutable), but the
human-readable comments referenced only major versions (e.g., `# v6`, `#
v5`).
**When maintainers move these mutable tags to a new commit, zizmor fails
in CI because the SHA no longer matches the stated tag.**
---
.github/workflows/asf-allowlist-check.yml | 2 +-
.github/workflows/codeql.yml | 2 +-
.github/workflows/cpp-linter.yml | 2 +-
.github/workflows/docs.yml | 4 ++--
.github/workflows/license_check.yml | 2 +-
.github/workflows/pre-commit.yml | 4 ++--
.github/workflows/rc.yml | 10 +++++-----
.github/workflows/s3_test.yml | 2 +-
.github/workflows/sanitizer_test.yml | 2 +-
.github/workflows/test.yml | 10 +++++-----
10 files changed, 20 insertions(+), 20 deletions(-)
diff --git a/.github/workflows/asf-allowlist-check.yml
b/.github/workflows/asf-allowlist-check.yml
index 65dbe8bc..8d7952a9 100644
--- a/.github/workflows/asf-allowlist-check.yml
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -40,7 +40,7 @@ jobs:
asf-allowlist-check:
runs-on: ubuntu-24.04
steps:
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- uses:
apache/infrastructure-actions/allowlist-check@4e9c961f587f72b170874b6f5cd4ac15f7f26eb8
# main
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 7e9c8208..49212916 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -41,7 +41,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
diff --git a/.github/workflows/cpp-linter.yml b/.github/workflows/cpp-linter.yml
index 51a8f4d6..dd78a98f 100644
--- a/.github/workflows/cpp-linter.yml
+++ b/.github/workflows/cpp-linter.yml
@@ -34,7 +34,7 @@ jobs:
pull-requests: write
steps:
- name: Checkout iceberg-cpp
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
with:
persist-credentials: false
- name: Install dependencies
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index f27c6606..a0d16384 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -37,12 +37,12 @@ jobs:
runs-on: ubuntu-slim
steps:
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
with:
fetch-depth: 1
persist-credentials: false
- - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #
v6
+ - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #
v6.2.0
with:
python-version: '3.x'
diff --git a/.github/workflows/license_check.yml
b/.github/workflows/license_check.yml
index 17af559d..4bb28c0d 100644
--- a/.github/workflows/license_check.yml
+++ b/.github/workflows/license_check.yml
@@ -28,7 +28,7 @@ jobs:
runs-on: ubuntu-slim
steps:
- name: Checkout repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
with:
persist-credentials: false
- name: Check license header
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 363c234b..583f280b 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -31,8 +31,8 @@ jobs:
pre-commit:
runs-on: ubuntu-slim
steps:
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+ - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #
v6.2.0
- uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd #
v3.0.1
diff --git a/.github/workflows/rc.yml b/.github/workflows/rc.yml
index d302da6c..fa27c99c 100644
--- a/.github/workflows/rc.yml
+++ b/.github/workflows/rc.yml
@@ -34,7 +34,7 @@ jobs:
timeout-minutes: 5
steps:
- name: Checkout
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
with:
persist-credentials: false
@@ -86,11 +86,11 @@ jobs:
CXX: g++-14
steps:
- name: Checkout
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
with:
persist-credentials: false
- - uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+ - uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
name: archive
@@ -134,11 +134,11 @@ jobs:
contents: write
steps:
- name: Checkout
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
with:
persist-credentials: false
- - uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+ - uses:
actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
name: archive
diff --git a/.github/workflows/s3_test.yml b/.github/workflows/s3_test.yml
index 74ab1102..d9675a4d 100644
--- a/.github/workflows/s3_test.yml
+++ b/.github/workflows/s3_test.yml
@@ -61,7 +61,7 @@ jobs:
AWS_EC2_METADATA_DISABLED: "TRUE"
steps:
- name: Checkout iceberg-cpp
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
with:
persist-credentials: false
- name: Install dependencies on Ubuntu
diff --git a/.github/workflows/sanitizer_test.yml
b/.github/workflows/sanitizer_test.yml
index 58cb21f2..f33eda1b 100644
--- a/.github/workflows/sanitizer_test.yml
+++ b/.github/workflows/sanitizer_test.yml
@@ -39,7 +39,7 @@ jobs:
runs-on: ubuntu-24.04
steps:
- name: Checkout iceberg-cpp
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
with:
persist-credentials: false
- name: Install dependencies
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index dffabe8a..973d2f43 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -45,7 +45,7 @@ jobs:
fail-fast: false
steps:
- name: Checkout iceberg-cpp
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
with:
persist-credentials: false
- name: Install dependencies
@@ -71,7 +71,7 @@ jobs:
fail-fast: false
steps:
- name: Checkout iceberg-cpp
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
with:
persist-credentials: false
- name: Build Iceberg
@@ -88,7 +88,7 @@ jobs:
fail-fast: false
steps:
- name: Checkout iceberg-cpp
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
with:
persist-credentials: false
- name: Set up MSVC Developer Command Prompt
@@ -135,11 +135,11 @@ jobs:
- title: AArch64 macOS 26
runs-on: macos-26
steps:
- - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #
v6
+ - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 #
v6.2.0
with:
python-version: '3.x'
- name: Checkout iceberg-cpp
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
with:
persist-credentials: false
- name: Install build dependencies
