valkyrjaio / ci-phpunit-php / 30415838568
100%

DEFAULT BRANCH: 26.x
Ran
Jobs 1
Files 3
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 100.0%. Remained the same
30415838568

push

github

web-flow 
[CI] Pin GitHub Actions to commit SHAs in the reusable workflow (#143)

# Description

Every third-party GitHub Action referenced by this tool's reusable
`_workflow-call.yml` was pinned to a mutable tag
(`@v6`, `@v2`, …). A mutable ref means the action's owner — or anyone
who
compromises their account — can change the code that runs in our CI
without any
change landing in this repository.

This is part of an organization-wide sweep. It replicates what
`valkyrjaio/valkyrja-app-php` did for its own `ci.yml` and what

[valkyrjaio/.github#148](https://github.com/valkyrjaio/.github/pull/148)
does for
the shared reusable workflows: pin every third-party action to a full
40-character commit SHA, with the resolved release tag kept in a
trailing comment
so the version stays readable and upgrades stay reviewable.

The change is purely mechanical — every changed line is a `uses:` line,
and the
SHAs match those used by the sibling repositories in the same sweep, so
the whole
organization agrees on one pinned version per action.

**Verification.** All workflow YAML files still parse, the diff contains
no
non-`uses:` edits, and trailing newlines are intact.

## Types of changes

- [x] Improvement _(non-breaking change which improves code)_
- [ ] Bug fix _(non-breaking change which fixes an issue)_
- [ ] New feature _(non-breaking change which adds functionality)_
- [ ] Deprecation _(breaking change which removes functionality)_
- [ ] Breaking change _(fix or feature that would cause existing
functionality to change)_
- [ ] Documentation improvement

## Changes

- **`_workflow-call.yml`** — pinned all third-party actions to commit
SHAs:
- **`actions/checkout`** — pinned to
`d23441a48` (`v6.1.0`)
- **`actions/create-github-app-token`** — pinned to
`fee1f7d63` (`v2.2.2`)
- **`coverallsapp/github-action`** — pinned to
`648a8eb78` (`v2.3.6`)
- **`dorny/paths-filter`** — pinned t... (continued)

34 of 34 relevant lines covered (100.0%)

3.38 hits per line

Jobs
ID Job ID Ran Files Coverage
1 30415838568.1 3
100.0
 GitHub Action Run
Source Files on build 30415838568