[mdevolde]

ci: replace sha pinning by actions.lock

Why the pull request was made

To harden the workflows, by ensuring that all the actions that are executed can't bump their versions, thanks to a lockfile.

Summary of changes

• Add an actions.lock (generated by gh actions-lock). Remove sha pinning in the workflows.

Screenshots (if appropriate):

Not applicable.

How has this been tested?

Not applicable, no functional changes.

Resources

https://docs.github.com/en/actions/how-tos/secure-your-work/lock-workflow-dependencies

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update (changes to documentation only)
• Refactor / code style update (non-breaking change that improves code structure or readability)
• Tests / CI improvement (adding or updating tests or CI configuration only)
• Chore / maintenance (non-breaking change that does not affect functionality, such as updating dependencies or fixing typos)
• Other (please describe):

Checklist

• Followed the project's contributing guidelines.
• Updated any relevant tests.
• Updated any relevant documentation.
• Added comments to your code where necessary.
• Formatted your code, run the linters, checked types and tests.
• Added your changes to the CHANGELOG file, if applicable.

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (b2a6d7c) to head (c544695).
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@            Coverage Diff            @@
##            master      #261   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           13        13           
  Lines         1743      1743           
=========================================
  Hits          1743      1743           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[mdevolde]

Note: wait auto update of zizmor to 1.32.0 to merge, because the support of actions lock are added in the version:
https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md