Skip to content

Commit 5e1d68e

Browse files
authored
Pin actions/cache/{restore,save} actions (#3969)
Pins the actions to a specific version and hash. The rational for pinning actions is to follow the suggestions by OpenSSF Scorecard, see https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies.
1 parent ab55608 commit 5e1d68e

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

.github/workflows/ci.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
submodules: true
3434

3535
- name: Enable cache
36-
uses: actions/cache/restore@v4
36+
uses: actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
3737
with:
3838
path: ${{ env.CACHE_DIR }}
3939
key: build-test-cpp-asserts-manylinux-${{ matrix.torch-version }}-v2-${{ github.sha }}
@@ -65,7 +65,7 @@ jobs:
6565
bash build_tools/ci/build_posix.sh
6666
6767
- name: Save cache
68-
uses: actions/cache/save@v4
68+
uses: actions/cache/save@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
6969
if: ${{ !cancelled() }}
7070
with:
7171
path: ${{ env.CACHE_DIR }}

0 commit comments

Comments
 (0)