This is an automated email from the ASF dual-hosted git repository.
xuanwo pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/opendal.git
The following commit(s) were added to refs/heads/main by this push:
new 285919bc0 ci: pin approved GitHub Actions refs (#7290)
285919bc0 is described below
commit 285919bc073556ba92192cd6f5c52b55dfe6fca7
Author: Xuanwo <[email protected]>
AuthorDate: Tue Mar 24 18:54:58 2026 +0800
ci: pin approved GitHub Actions refs (#7290)
* ci: pin approved GitHub Actions refs
* ci: avoid 1Password configure subpath action
---
.github/workflows/ci_bindings_python.yml | 2 +-
.github/workflows/docs.yml | 2 +-
.github/workflows/test_behavior_binding_c.yml | 10 ++++++----
.github/workflows/test_behavior_binding_cpp.yml | 10 ++++++----
.github/workflows/test_behavior_binding_dotnet.yml | 10 ++++++----
.github/workflows/test_behavior_binding_go.yml | 10 ++++++----
.github/workflows/test_behavior_binding_java.yml | 10 ++++++----
.github/workflows/test_behavior_binding_nodejs.yml | 10 ++++++----
.github/workflows/test_behavior_binding_python.yml | 12 +++++++-----
.github/workflows/test_behavior_core.yml | 10 ++++++----
.github/workflows/test_behavior_integration_object_store.yml | 10 ++++++----
11 files changed, 57 insertions(+), 39 deletions(-)
diff --git a/.github/workflows/ci_bindings_python.yml
b/.github/workflows/ci_bindings_python.yml
index 77ab055c2..4602cc152 100644
--- a/.github/workflows/ci_bindings_python.yml
+++ b/.github/workflows/ci_bindings_python.yml
@@ -42,7 +42,7 @@ jobs:
- name: Setup Rust toolchain
uses: ./.github/actions/setup
- name: Install uv
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 #
v7.6.0
with:
working-directory: "bindings/python"
- uses: taiki-e/install-action@just
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index aa6d716d9..bcc92a394 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -149,7 +149,7 @@ jobs:
uses: ./.github/actions/setup
- name: Setup uv
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 #
v7.6.0
with:
enable-cache: true
diff --git a/.github/workflows/test_behavior_binding_c.yml
b/.github/workflows/test_behavior_binding_c.yml
index 5b113aad5..0f9a744f5 100644
--- a/.github/workflows/test_behavior_binding_c.yml
+++ b/.github/workflows/test_behavior_binding_c.yml
@@ -46,10 +46,12 @@ jobs:
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: Setup 1Password Connect
- uses: 1password/load-secrets-action/configure@v3
- with:
- connect-host: ${{ secrets.OP_CONNECT_HOST }}
- connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
+ shell: bash
+ run: |
+ echo "::add-mask::${{ secrets.OP_CONNECT_HOST }}"
+ echo "::add-mask::${{ secrets.OP_CONNECT_TOKEN }}"
+ echo "OP_CONNECT_HOST=${{ secrets.OP_CONNECT_HOST }}" >>
"$GITHUB_ENV"
+ echo "OP_CONNECT_TOKEN=${{ secrets.OP_CONNECT_TOKEN }}" >>
"$GITHUB_ENV"
- name: Install build tools
run: |
diff --git a/.github/workflows/test_behavior_binding_cpp.yml
b/.github/workflows/test_behavior_binding_cpp.yml
index 6b5e19768..7162ba478 100644
--- a/.github/workflows/test_behavior_binding_cpp.yml
+++ b/.github/workflows/test_behavior_binding_cpp.yml
@@ -46,10 +46,12 @@ jobs:
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: Setup 1Password Connect
- uses: 1password/load-secrets-action/configure@v3
- with:
- connect-host: ${{ secrets.OP_CONNECT_HOST }}
- connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
+ shell: bash
+ run: |
+ echo "::add-mask::${{ secrets.OP_CONNECT_HOST }}"
+ echo "::add-mask::${{ secrets.OP_CONNECT_TOKEN }}"
+ echo "OP_CONNECT_HOST=${{ secrets.OP_CONNECT_HOST }}" >>
"$GITHUB_ENV"
+ echo "OP_CONNECT_TOKEN=${{ secrets.OP_CONNECT_TOKEN }}" >>
"$GITHUB_ENV"
- name: Install dependencies (Ubuntu)
if: runner.os == 'Linux'
diff --git a/.github/workflows/test_behavior_binding_dotnet.yml
b/.github/workflows/test_behavior_binding_dotnet.yml
index 868432e1f..cffc36a71 100644
--- a/.github/workflows/test_behavior_binding_dotnet.yml
+++ b/.github/workflows/test_behavior_binding_dotnet.yml
@@ -50,10 +50,12 @@ jobs:
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: Setup 1Password Connect
- uses: 1password/load-secrets-action/configure@v3
- with:
- connect-host: ${{ secrets.OP_CONNECT_HOST }}
- connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
+ shell: bash
+ run: |
+ echo "::add-mask::${{ secrets.OP_CONNECT_HOST }}"
+ echo "::add-mask::${{ secrets.OP_CONNECT_TOKEN }}"
+ echo "OP_CONNECT_HOST=${{ secrets.OP_CONNECT_HOST }}" >>
"$GITHUB_ENV"
+ echo "OP_CONNECT_TOKEN=${{ secrets.OP_CONNECT_TOKEN }}" >>
"$GITHUB_ENV"
- name: Test Core
uses: ./.github/actions/test_behavior_binding_dotnet
diff --git a/.github/workflows/test_behavior_binding_go.yml
b/.github/workflows/test_behavior_binding_go.yml
index 522b1d15b..a1d7abc66 100644
--- a/.github/workflows/test_behavior_binding_go.yml
+++ b/.github/workflows/test_behavior_binding_go.yml
@@ -53,10 +53,12 @@ jobs:
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: Setup 1Password Connect
- uses: 1password/load-secrets-action/configure@v3
- with:
- connect-host: ${{ secrets.OP_CONNECT_HOST }}
- connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
+ shell: bash
+ run: |
+ echo "::add-mask::${{ secrets.OP_CONNECT_HOST }}"
+ echo "::add-mask::${{ secrets.OP_CONNECT_TOKEN }}"
+ echo "OP_CONNECT_HOST=${{ secrets.OP_CONNECT_HOST }}" >>
"$GITHUB_ENV"
+ echo "OP_CONNECT_TOKEN=${{ secrets.OP_CONNECT_TOKEN }}" >>
"$GITHUB_ENV"
- uses: actions/setup-go@v6
with:
go-version-file: bindings/go/go.mod
diff --git a/.github/workflows/test_behavior_binding_java.yml
b/.github/workflows/test_behavior_binding_java.yml
index 46b3b1202..39cf15b06 100644
--- a/.github/workflows/test_behavior_binding_java.yml
+++ b/.github/workflows/test_behavior_binding_java.yml
@@ -46,10 +46,12 @@ jobs:
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: Setup 1Password Connect
- uses: 1password/load-secrets-action/configure@v3
- with:
- connect-host: ${{ secrets.OP_CONNECT_HOST }}
- connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
+ shell: bash
+ run: |
+ echo "::add-mask::${{ secrets.OP_CONNECT_HOST }}"
+ echo "::add-mask::${{ secrets.OP_CONNECT_TOKEN }}"
+ echo "OP_CONNECT_HOST=${{ secrets.OP_CONNECT_HOST }}" >>
"$GITHUB_ENV"
+ echo "OP_CONNECT_TOKEN=${{ secrets.OP_CONNECT_TOKEN }}" >>
"$GITHUB_ENV"
- name: Test Core
uses: ./.github/actions/test_behavior_binding_java
diff --git a/.github/workflows/test_behavior_binding_nodejs.yml
b/.github/workflows/test_behavior_binding_nodejs.yml
index 575769328..99ad89735 100644
--- a/.github/workflows/test_behavior_binding_nodejs.yml
+++ b/.github/workflows/test_behavior_binding_nodejs.yml
@@ -46,10 +46,12 @@ jobs:
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: Setup 1Password Connect
- uses: 1password/load-secrets-action/configure@v3
- with:
- connect-host: ${{ secrets.OP_CONNECT_HOST }}
- connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
+ shell: bash
+ run: |
+ echo "::add-mask::${{ secrets.OP_CONNECT_HOST }}"
+ echo "::add-mask::${{ secrets.OP_CONNECT_TOKEN }}"
+ echo "OP_CONNECT_HOST=${{ secrets.OP_CONNECT_HOST }}" >>
"$GITHUB_ENV"
+ echo "OP_CONNECT_TOKEN=${{ secrets.OP_CONNECT_TOKEN }}" >>
"$GITHUB_ENV"
- uses: pnpm/action-setup@v4
with:
diff --git a/.github/workflows/test_behavior_binding_python.yml
b/.github/workflows/test_behavior_binding_python.yml
index 9fd2a8f01..9f9a0c923 100644
--- a/.github/workflows/test_behavior_binding_python.yml
+++ b/.github/workflows/test_behavior_binding_python.yml
@@ -46,13 +46,15 @@ jobs:
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: Setup 1Password Connect
- uses: 1password/load-secrets-action/configure@v3
- with:
- connect-host: ${{ secrets.OP_CONNECT_HOST }}
- connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
+ shell: bash
+ run: |
+ echo "::add-mask::${{ secrets.OP_CONNECT_HOST }}"
+ echo "::add-mask::${{ secrets.OP_CONNECT_TOKEN }}"
+ echo "OP_CONNECT_HOST=${{ secrets.OP_CONNECT_HOST }}" >>
"$GITHUB_ENV"
+ echo "OP_CONNECT_TOKEN=${{ secrets.OP_CONNECT_TOKEN }}" >>
"$GITHUB_ENV"
- name: Setup uv
- uses: astral-sh/setup-uv@v7
+ uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 #
v7.6.0
with:
enable-cache: true
- name: Build with maturin
diff --git a/.github/workflows/test_behavior_core.yml
b/.github/workflows/test_behavior_core.yml
index aa0086e2f..a8ad087e2 100644
--- a/.github/workflows/test_behavior_core.yml
+++ b/.github/workflows/test_behavior_core.yml
@@ -45,10 +45,12 @@ jobs:
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: Setup 1Password Connect
- uses: 1password/load-secrets-action/configure@v3
- with:
- connect-host: ${{ secrets.OP_CONNECT_HOST }}
- connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
+ shell: bash
+ run: |
+ echo "::add-mask::${{ secrets.OP_CONNECT_HOST }}"
+ echo "::add-mask::${{ secrets.OP_CONNECT_TOKEN }}"
+ echo "OP_CONNECT_HOST=${{ secrets.OP_CONNECT_HOST }}" >>
"$GITHUB_ENV"
+ echo "OP_CONNECT_TOKEN=${{ secrets.OP_CONNECT_TOKEN }}" >>
"$GITHUB_ENV"
- name: Test Core
uses: ./.github/actions/test_behavior_core
diff --git a/.github/workflows/test_behavior_integration_object_store.yml
b/.github/workflows/test_behavior_integration_object_store.yml
index 07293c61c..f4b74577f 100644
--- a/.github/workflows/test_behavior_integration_object_store.yml
+++ b/.github/workflows/test_behavior_integration_object_store.yml
@@ -46,10 +46,12 @@ jobs:
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: Setup 1Password Connect
- uses: 1password/load-secrets-action/configure@v3
- with:
- connect-host: ${{ secrets.OP_CONNECT_HOST }}
- connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
+ shell: bash
+ run: |
+ echo "::add-mask::${{ secrets.OP_CONNECT_HOST }}"
+ echo "::add-mask::${{ secrets.OP_CONNECT_TOKEN }}"
+ echo "OP_CONNECT_HOST=${{ secrets.OP_CONNECT_HOST }}" >>
"$GITHUB_ENV"
+ echo "OP_CONNECT_TOKEN=${{ secrets.OP_CONNECT_TOKEN }}" >>
"$GITHUB_ENV"
- name: Test Core
uses: ./.github/actions/test_behavior_integration_object_store
