From 2f2af6f55e4ebacfe5d560b5313b223c0ec2d79a Mon Sep 17 00:00:00 2001 From: "Charlotte St. John" Date: Thu, 25 Jun 2026 18:28:03 -0500 Subject: [PATCH] ci: migrate runs-on to Twilio runner labels + SHA-pin actions --- .github/workflows/build.yml | 12 ++++++------ .github/workflows/create_jira.yml | 8 ++++---- .github/workflows/e2e-tests.yml | 12 ++++++------ .github/workflows/publish-e2e-cli.yml | 8 ++++---- .github/workflows/release.yml | 8 ++++---- .github/workflows/snyk.yml | 6 +++--- 6 files changed, 27 insertions(+), 27 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 622447c..a6ec94f 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -10,20 +10,20 @@ on: jobs: cancel_previous: permissions: write-all - runs-on: ubuntu-22.04 + runs-on: ubuntu-latest-large steps: - - uses: styfle/cancel-workflow-action@0.9.1 + - uses: styfle/cancel-workflow-action@a40b8845c0683271d9f53dfcb887a7e181d3918b # 0.9.1 with: workflow_id: ${{ github.event.workflow.id }} build: needs: cancel_previous - runs-on: ubuntu-22.04 + runs-on: ubuntu-latest-large steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 - name: Setup .NET Core SDK - uses: actions/setup-dotnet@v2 + uses: actions/setup-dotnet@8e6bd2905eef86446227f003dda1deb3916c4aaf # v2 with: dotnet-version: | 3.1.x @@ -31,7 +31,7 @@ jobs: 6.0.x - name: Restore cache - uses: actions/cache@v3 + uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3 with: path: ~/.nuget/packages # Look to see if there is a cache hit for the corresponding requirements file diff --git a/.github/workflows/create_jira.yml b/.github/workflows/create_jira.yml index 7bc1865..a497ae3 100644 --- a/.github/workflows/create_jira.yml +++ b/.github/workflows/create_jira.yml @@ -8,13 +8,13 @@ on: jobs: create_jira: name: Create Jira Ticket - runs-on: ubuntu-latest + runs-on: ubuntu-latest-large environment: IssueTracker steps: - name: Checkout - uses: actions/checkout@master + uses: actions/checkout@61b9e3751b92087fd0b06925ba6dd6314e06f089 # master - name: Login - uses: atlassian/gajira-login@master + uses: atlassian/gajira-login@c22a5debd482401472b285de4f6deedf70ddbb92 # master env: JIRA_BASE_URL: ${{ secrets.JIRA_BASE_URL }} JIRA_USER_EMAIL: ${{ secrets.JIRA_USER_EMAIL }} @@ -24,7 +24,7 @@ jobs: - name: Create id: create - uses: atlassian/gajira-create@master + uses: atlassian/gajira-create@1c54357fdde9dab6273a0e26d67cb175ffffe498 # master with: project: ${{ secrets.JIRA_PROJECT }} issuetype: Bug diff --git a/.github/workflows/e2e-tests.yml b/.github/workflows/e2e-tests.yml index a24a172..ebcb762 100644 --- a/.github/workflows/e2e-tests.yml +++ b/.github/workflows/e2e-tests.yml @@ -15,16 +15,16 @@ on: jobs: e2e-tests: if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }} - runs-on: ubuntu-latest + runs-on: ubuntu-latest-large steps: - name: Checkout SDK - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: path: sdk - name: Checkout sdk-e2e-tests - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: repository: segmentio/sdk-e2e-tests ref: ${{ inputs.e2e_tests_ref || 'main' }} @@ -32,12 +32,12 @@ jobs: path: sdk-e2e-tests - name: Setup .NET - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: dotnet-version: '10.0.x' - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: '20' @@ -54,7 +54,7 @@ jobs: - name: Upload test results if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: e2e-test-results path: sdk-e2e-tests/test-results/ diff --git a/.github/workflows/publish-e2e-cli.yml b/.github/workflows/publish-e2e-cli.yml index 3581f5d..14cbcee 100644 --- a/.github/workflows/publish-e2e-cli.yml +++ b/.github/workflows/publish-e2e-cli.yml @@ -12,13 +12,13 @@ on: jobs: publish: - runs-on: ubuntu-latest + runs-on: ubuntu-latest-large steps: - name: Checkout SDK - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Setup .NET - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4 with: dotnet-version: '10.0.x' @@ -27,7 +27,7 @@ jobs: run: dotnet build -c Release -o build - name: Upload CLI artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: e2e-cli-csharp path: e2e-cli/build/ diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 62f2906..2c83040 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -9,11 +9,11 @@ on: jobs: release: permissions: write-all - runs-on: ubuntu-22.04 + runs-on: ubuntu-latest-large environment: deployment steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 - name: Get tag id: vars run: echo ::set-output name=tag::${GITHUB_REF#refs/*/} @@ -25,14 +25,14 @@ jobs: exit 1 } fi - name: Setup .NET Core SDK - uses: actions/setup-dotnet@v2 + uses: actions/setup-dotnet@8e6bd2905eef86446227f003dda1deb3916c4aaf # v2 with: dotnet-version: | 3.1.x 5.0.x 6.0.x - name: Restore cache - uses: actions/cache@v3 + uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3 with: path: ~/.nuget/packages # Look to see if there is a cache hit for the corresponding requirements file diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml index 5d0be57..f9d7d20 100644 --- a/.github/workflows/snyk.yml +++ b/.github/workflows/snyk.yml @@ -9,13 +9,13 @@ on: jobs: security: - runs-on: ubuntu-latest + runs-on: ubuntu-latest-large steps: - - uses: actions/checkout@master + - uses: actions/checkout@61b9e3751b92087fd0b06925ba6dd6314e06f089 # master - name: Install dependencies run: dotnet restore - name: Run Snyk to check for vulnerabilities - uses: snyk/actions/dotnet@master + uses: snyk/actions/dotnet@8e119fbb6c251787721d34ba683ed48eba792766 # master env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} with: