@@ -143,15 +143,15 @@ jobs:
143
143
steps :
144
144
- name : " Setup QEMU"
145
145
if : matrix.os == 'ubuntu'
146
- uses : docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3
146
+ uses : docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
147
147
with :
148
148
platforms : arm64
149
149
150
150
- name : " Check out the repo"
151
- uses : actions/checkout@v4
151
+ uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
152
152
153
153
- name : " Install Python 3.8"
154
- uses : actions/setup-python@v5
154
+ uses : actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
155
155
with :
156
156
# PYVERSIONS
157
157
python-version : " 3.8"
@@ -181,7 +181,7 @@ jobs:
181
181
python -m twine check wheelhouse/*
182
182
183
183
- name : " Upload wheels"
184
- uses : actions/upload-artifact@v4
184
+ uses : actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
185
185
with :
186
186
name : dist-${{ env.MATRIX_ID }}
187
187
path : wheelhouse/*.whl
@@ -192,10 +192,10 @@ jobs:
192
192
runs-on : ubuntu-latest
193
193
steps :
194
194
- name : " Check out the repo"
195
- uses : actions/checkout@v4
195
+ uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
196
196
197
197
- name : " Install Python 3.8"
198
- uses : actions/setup-python@v5
198
+ uses : actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
199
199
with :
200
200
# PYVERSIONS
201
201
python-version : " 3.8"
@@ -219,7 +219,7 @@ jobs:
219
219
python -m twine check dist/*
220
220
221
221
- name : " Upload sdist"
222
- uses : actions/upload-artifact@v4
222
+ uses : actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
223
223
with :
224
224
name : dist-sdist
225
225
path : dist/*.tar.gz
@@ -230,10 +230,10 @@ jobs:
230
230
runs-on : ubuntu-latest
231
231
steps :
232
232
- name : " Check out the repo"
233
- uses : actions/checkout@v4
233
+ uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
234
234
235
235
- name : " Install PyPy"
236
- uses : actions/setup-python@v5
236
+ uses : actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
237
237
with :
238
238
python-version : " pypy-3.8" # Minimum of PyPy PYVERSIONS
239
239
cache : pip
@@ -261,7 +261,7 @@ jobs:
261
261
python -m twine check dist/*
262
262
263
263
- name : " Upload wheels"
264
- uses : actions/upload-artifact@v4
264
+ uses : actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
265
265
with :
266
266
name : dist-pypy
267
267
path : dist/*.whl
@@ -280,13 +280,13 @@ jobs:
280
280
id-token : write
281
281
steps :
282
282
- name : " Download artifacts"
283
- uses : actions/download-artifact@v4
283
+ uses : actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
284
284
with :
285
285
pattern : dist-*
286
286
merge-multiple : true
287
287
288
288
- name : " Sign artifacts"
289
-
289
+ uses : sigstore/gh-action-sigstore-python@61f6a500bbfdd9a2a339cf033e5421951fbc1cd2 # v2.1.1
290
290
with :
291
291
inputs : coverage-*.*
292
292
@@ -295,7 +295,7 @@ jobs:
295
295
ls -alR
296
296
297
297
- name : " Upload signatures"
298
- uses : actions/upload-artifact@v4
298
+ uses : actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
299
299
with :
300
300
name : signatures
301
301
path : |
0 commit comments