Merge pull request #22 from athombv/ci/pin-reused-actions

ci: pin reused actions

Author: nozols

.github/workflows/build.yml

@@ -16,10 +16,10 @@ jobs:
     runs-on: buildjet-2vcpu-ubuntu-2204-arm
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e
         with:
           node-version-file: '.nvmrc'
           registry-url: 'https://npm.pkg.github.com'

.github/workflows/lint.yml

@@ -13,5 +13,20 @@ on:
 jobs:
   lint:
     name: Lint
-    uses: athombv/athom-github-workflow/.github/workflows/lint.yml@master
-    secrets: inherit
+    runs-on: buildjet-2vcpu-ubuntu-2204-arm
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+
+      - name: Setup Node.js
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e
+        with:
+          node-version-file: '.nvmrc'
+          registry-url: 'https://npm.pkg.github.com'
+
+      - name: Lint
+        run: |
+          npm ci --ignore-scripts --audit=false
+          npm run lint
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.HOMEY_GITHUB_ACTIONS_BOT_PERSONAL_ACCESS_TOKEN }}

.github/workflows/npm-version.yml

@@ -38,10 +38,10 @@ jobs:
           exit 1
 
       - name: Checkout git repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e
         with:
           node-version-file: '.nvmrc'
           registry-url: 'https://npm.pkg.github.com'

.github/workflows/release.yml

@@ -12,10 +12,10 @@ jobs:
     runs-on: buildjet-2vcpu-ubuntu-2204-arm
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e
         with:
           node-version-file: '.nvmrc'
           registry-url: 'https://npm.pkg.github.com'
@@ -55,7 +55,7 @@ jobs:
         # Post a Slack notification on success/failure
       - name: Slack notify
         if: always()
-        uses: innocarpe/actions-slack@v1
+        uses: innocarpe/actions-slack@b2f50d9d8037ef8a1f77fa4659767747120124e4
         with:
           status: ${{ job.status }}
           success_text: '${{github.repository}} - Published ${{ env.package_name }}@${{ env.package_version }} to GitHub Packages Registry 🚀'

.github/workflows/test.yml

@@ -13,5 +13,23 @@ on:
 jobs:
   test:
     name: Test
-    uses: athombv/athom-github-workflow/.github/workflows/test.yml@master
-    secrets: inherit
+    runs-on: buildjet-2vcpu-ubuntu-2204-arm
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+
+      - name: Setup Node.js
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e
+        with:
+          node-version-file: '.nvmrc'
+          registry-url: 'https://npm.pkg.github.com'
+
+      - name: Build
+        run: |
+          npm ci --audit=false
+          npm run build
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.HOMEY_GITHUB_ACTIONS_BOT_PERSONAL_ACCESS_TOKEN }}
+
+      - name: Test
+        run: npm run test