Skip to content

Commit cf75e4a

Browse files
BenjaminBossanBenjaminBossan
authored
MNT Pin GitHub action hashes for security (#2521)
Make Zizmor happy again.
1 parent 6383a6b commit cf75e4a

File tree

5 files changed

+29
-29
lines changed

5 files changed

+29
-29
lines changed

‎.github/workflows/build_docker_images.yml

+16-16
Original file line numberDiff line numberDiff line change
@@ -22,27 +22,27 @@ jobs:
2222
group: aws-general-8-plus
2323
steps:
2424
- name: Set up Docker Buildx
25-
uses: docker/setup-buildx-action@v1
25+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
2626
- name: Check out code
2727
uses: actions/checkout@v3
2828
with:
2929
persist-credentials: false
3030
- name: Login to DockerHub
31-
uses: docker/login-action@v2
31+
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
3232
with:
3333
username: ${{ secrets.DOCKERHUB_USERNAME }}
3434
password: ${{ secrets.DOCKERHUB_PASSWORD }}
3535

3636
- name: Build and Push CPU
37-
uses: docker/build-push-action@v4
37+
uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
3838
with:
3939
context: ./docker/peft-cpu
4040
push: true
4141
tags: huggingface/peft-cpu
4242

4343
- name: Post to Slack
4444
if: always()
45-
uses: huggingface/hf-workflows/.github/actions/post-slack@main
45+
uses: huggingface/hf-workflows/.github/actions/post-slack@3f88d63d3761558a32e8e46fc2a8536e04bb2aea # main from Feb 2025-02-24
4646
with:
4747
slack_channel: ${{ env.CI_SLACK_CHANNEL }}
4848
title: 🤗 Results of the PEFT-CPU docker build
@@ -55,27 +55,27 @@ jobs:
5555
group: aws-general-8-plus
5656
steps:
5757
- name: Set up Docker Buildx
58-
uses: docker/setup-buildx-action@v1
58+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
5959
- name: Check out code
6060
uses: actions/checkout@v3
6161
with:
6262
persist-credentials: false
6363
- name: Login to DockerHub
64-
uses: docker/login-action@v1
64+
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
6565
with:
6666
username: ${{ secrets.DOCKERHUB_USERNAME }}
6767
password: ${{ secrets.DOCKERHUB_PASSWORD }}
6868

6969
- name: Build and Push GPU
70-
uses: docker/build-push-action@v4
70+
uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
7171
with:
7272
context: ./docker/peft-gpu
7373
push: true
7474
tags: huggingface/peft-gpu
7575

7676
- name: Post to Slack
7777
if: always()
78-
uses: huggingface/hf-workflows/.github/actions/post-slack@main
78+
uses: huggingface/hf-workflows/.github/actions/post-slack@3f88d63d3761558a32e8e46fc2a8536e04bb2aea # main from Feb 2025-02-24
7979
with:
8080
slack_channel: ${{ env.CI_SLACK_CHANNEL }}
8181
title: 🤗 Results of the PEFT-GPU docker build
@@ -88,27 +88,27 @@ jobs:
8888
group: aws-general-8-plus
8989
steps:
9090
- name: Set up Docker Buildx
91-
uses: docker/setup-buildx-action@v1
91+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
9292
- name: Check out code
9393
uses: actions/checkout@v3
9494
with:
9595
persist-credentials: false
9696
- name: Login to DockerHub
97-
uses: docker/login-action@v1
97+
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
9898
with:
9999
username: ${{ secrets.DOCKERHUB_USERNAME }}
100100
password: ${{ secrets.DOCKERHUB_PASSWORD }}
101101

102102
- name: Build and Push GPU
103-
uses: docker/build-push-action@v4
103+
uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
104104
with:
105105
context: ./docker/peft-gpu-bnb-source
106106
push: true
107107
tags: huggingface/peft-gpu-bnb-source
108108

109109
- name: Post to Slack
110110
if: always()
111-
uses: huggingface/hf-workflows/.github/actions/post-slack@main
111+
uses: huggingface/hf-workflows/.github/actions/post-slack@3f88d63d3761558a32e8e46fc2a8536e04bb2aea # main from Feb 2025-02-24
112112
with:
113113
slack_channel: ${{ env.CI_SLACK_CHANNEL }}
114114
title: 🤗 Results of the PEFT-GPU (bnb source / HF latest) docker build
@@ -121,27 +121,27 @@ jobs:
121121
group: aws-general-8-plus
122122
steps:
123123
- name: Set up Docker Buildx
124-
uses: docker/setup-buildx-action@v1
124+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
125125
- name: Check out code
126126
uses: actions/checkout@v3
127127
with:
128128
persist-credentials: false
129129
- name: Login to DockerHub
130-
uses: docker/login-action@v1
130+
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
131131
with:
132132
username: ${{ secrets.DOCKERHUB_USERNAME }}
133133
password: ${{ secrets.DOCKERHUB_PASSWORD }}
134134

135135
- name: Build and Push GPU
136-
uses: docker/build-push-action@v4
136+
uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
137137
with:
138138
context: ./docker/peft-gpu-bnb-latest
139139
push: true
140140
tags: huggingface/peft-gpu-bnb-latest
141141

142142
- name: Post to Slack
143143
if: always()
144-
uses: huggingface/hf-workflows/.github/actions/post-slack@main
144+
uses: huggingface/hf-workflows/.github/actions/post-slack@3f88d63d3761558a32e8e46fc2a8536e04bb2aea # main from Feb 2025-02-24
145145
with:
146146
slack_channel: ${{ env.CI_SLACK_CHANNEL }}
147147
title: 🤗 Results of the PEFT-GPU (bnb source / HF source) docker build

‎.github/workflows/nightly-bnb.yml

+9-9
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@ jobs:
6262
6363
- name: Post to Slack
6464
if: always()
65-
uses: huggingface/hf-workflows/.github/actions/post-slack@main
65+
uses: huggingface/hf-workflows/.github/actions/post-slack@3f88d63d3761558a32e8e46fc2a8536e04bb2aea # main from Feb 2025-02-24
6666
with:
6767
slack_channel: ${{ secrets.BNB_SLACK_CHANNEL_ID }}
6868
title: 🤗 Results of bitsandbytes import
@@ -78,7 +78,7 @@ jobs:
7878
7979
- name: Post to Slack
8080
if: always()
81-
uses: huggingface/hf-workflows/.github/actions/post-slack@main
81+
uses: huggingface/hf-workflows/.github/actions/post-slack@3f88d63d3761558a32e8e46fc2a8536e04bb2aea # main from Feb 2025-02-24
8282
with:
8383
slack_channel: ${{ secrets.BNB_SLACK_CHANNEL_ID }}
8484
title: 🤗 Results of bitsandbytes examples tests - single GPU
@@ -94,7 +94,7 @@ jobs:
9494
9595
- name: Post to Slack
9696
if: always()
97-
uses: huggingface/hf-workflows/.github/actions/post-slack@main
97+
uses: huggingface/hf-workflows/.github/actions/post-slack@3f88d63d3761558a32e8e46fc2a8536e04bb2aea # main from Feb 2025-02-24
9898
with:
9999
slack_channel: ${{ secrets.BNB_SLACK_CHANNEL_ID }}
100100
title: 🤗 Results of bitsandbytes core tests - single GPU
@@ -111,7 +111,7 @@ jobs:
111111

112112
# - name: Post to Slack
113113
# if: always()
114-
# uses: huggingface/hf-workflows/.github/actions/post-slack@main
114+
# uses: huggingface/hf-workflows/.github/actions/post-slack@3f88d63d3761558a32e8e46fc2a8536e04bb2aea # main from Feb 2025-02-24
115115
# with:
116116
# slack_channel: ${{ secrets.BNB_SLACK_CHANNEL_ID }}
117117
# title: 🤗 Results of bitsandbytes regression tests - single GPU
@@ -127,7 +127,7 @@ jobs:
127127
128128
- name: Post to Slack
129129
if: always()
130-
uses: huggingface/hf-workflows/.github/actions/post-slack@main
130+
uses: huggingface/hf-workflows/.github/actions/post-slack@3f88d63d3761558a32e8e46fc2a8536e04bb2aea # main from Feb 2025-02-24
131131
with:
132132
slack_channel: ${{ secrets.BNB_SLACK_CHANNEL_ID }}
133133
title: 🤗 Results of bitsandbytes transformers tests - single GPU
@@ -187,7 +187,7 @@ jobs:
187187
188188
- name: Post to Slack
189189
if: always()
190-
uses: huggingface/hf-workflows/.github/actions/post-slack@main
190+
uses: huggingface/hf-workflows/.github/actions/post-slack@3f88d63d3761558a32e8e46fc2a8536e04bb2aea # main from Feb 2025-02-24
191191
with:
192192
slack_channel: ${{ secrets.BNB_SLACK_CHANNEL_ID }}
193193
title: 🤗 Results of bitsandbytes import
@@ -203,7 +203,7 @@ jobs:
203203
204204
- name: Post to Slack
205205
if: always()
206-
uses: huggingface/hf-workflows/.github/actions/post-slack@main
206+
uses: huggingface/hf-workflows/.github/actions/post-slack@3f88d63d3761558a32e8e46fc2a8536e04bb2aea # main from Feb 2025-02-24
207207
with:
208208
slack_channel: ${{ secrets.BNB_SLACK_CHANNEL_ID }}
209209
title: 🤗 Results of bitsandbytes examples tests - multi GPU
@@ -219,7 +219,7 @@ jobs:
219219
220220
- name: Post to Slack
221221
if: always()
222-
uses: huggingface/hf-workflows/.github/actions/post-slack@main
222+
uses: huggingface/hf-workflows/.github/actions/post-slack@3f88d63d3761558a32e8e46fc2a8536e04bb2aea # main from Feb 2025-02-24
223223
with:
224224
slack_channel: ${{ secrets.BNB_SLACK_CHANNEL_ID }}
225225
title: 🤗 Results of bitsandbytes core tests - multi GPU
@@ -235,7 +235,7 @@ jobs:
235235
236236
- name: Post to Slack
237237
if: always()
238-
uses: huggingface/hf-workflows/.github/actions/post-slack@main
238+
uses: huggingface/hf-workflows/.github/actions/post-slack@3f88d63d3761558a32e8e46fc2a8536e04bb2aea # main from Feb 2025-02-24
239239
with:
240240
slack_channel: ${{ secrets.BNB_SLACK_CHANNEL_ID }}
241241
title: 🤗 Results of bitsandbytes transformers tests - multi GPU

‎.github/workflows/test-docker-build.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -53,13 +53,13 @@ jobs:
5353
sudo du -sh /usr/local/lib/
5454
sudo du -sh /usr/share/
5555
- name: Set up Docker Buildx
56-
uses: docker/setup-buildx-action@v1
56+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
5757
- name: Check out code
5858
uses: actions/checkout@v3
5959
with:
6060
persist-credentials: false
6161
- name: Build Docker image
62-
uses: docker/build-push-action@v4
62+
uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
6363
with:
6464
file: ${{ matrix.docker-file }}
6565
context: .

‎.github/workflows/tests-main.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
make test
3636
- name: Post to Slack
3737
if: always()
38-
uses: huggingface/hf-workflows/.github/actions/post-slack@main
38+
uses: huggingface/hf-workflows/.github/actions/post-slack@3f88d63d3761558a32e8e46fc2a8536e04bb2aea # main from Feb 2025-02-24
3939
with:
4040
slack_channel: ${{ secrets.SLACK_CHANNEL_ID }}
4141
title: 🤗 Results of transformers main tests

‎.github/workflows/trufflehog.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -15,4 +15,4 @@ jobs:
1515
fetch-depth: 0
1616
persist-credentials: false
1717
- name: Secret Scanning
18-
uses: trufflesecurity/trufflehog@main
18+
uses: trufflesecurity/trufflehog@d722a7e50645c42123e31fe97761a88ade988db8 # v3.88.25

0 commit comments

Comments
 (0)