Ref actions by commit SHA in test.yml

It's important to make sure the SHA's are from the original repositories and not forks.

For reference:

https://github.com/actions/setup-go/releases/tag/v4.0.1
fac708d667

https://github.com/actions/checkout/releases/tag/v3.5.2
8e5e7e5ab8

https://github.com/actions/cache/releases/tag/v3.3.1
88522ab9f3


Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com>
pull/1480/head
Gabriela Gutierrez 2 years ago committed by GitHub
parent 404301103d
commit 147902f4cb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -23,17 +23,17 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Install Go - name: Install Go
uses: actions/setup-go@v4 uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
with: with:
go-version: ${{ matrix.go-version }} go-version: ${{ matrix.go-version }}
- name: Checkout code - name: Checkout code
uses: actions/checkout@v3 uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
- id: go-env - id: go-env
run: | run: |
echo "::set-output name=cache::$(go env GOCACHE)" echo "::set-output name=cache::$(go env GOCACHE)"
echo "::set-output name=mod-cache::$(go env GOMODCACHE)" echo "::set-output name=mod-cache::$(go env GOMODCACHE)"
- name: Cache go modules - name: Cache go modules
uses: actions/cache@v3 uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
with: with:
path: | path: |
${{ steps.go-env.outputs.cache }} ${{ steps.go-env.outputs.cache }}

Loading…
Cancel
Save