From e19644cbfc0385a721cd226df2204a30b3f2267a Mon Sep 17 00:00:00 2001 From: Joas Schilling Date: Mon, 26 Jan 2026 12:09:46 +0100 Subject: [PATCH] ci(actions): Pin action versions Signed-off-by: Joas Schilling --- .github/workflows/phpunit-mariadb.yml | 1 + .github/workflows/phpunit-mysql.yml | 1 + .github/workflows/phpunit-oci.yml | 1 + .github/workflows/phpunit-pgsql.yml | 1 + .github/workflows/phpunit-sqlite.yml | 2 ++ .github/workflows/playwright.yml | 7 ++++++- 6 files changed, 12 insertions(+), 1 deletion(-) diff --git a/.github/workflows/phpunit-mariadb.yml b/.github/workflows/phpunit-mariadb.yml index 0bbc35e2d..8532045d8 100644 --- a/.github/workflows/phpunit-mariadb.yml +++ b/.github/workflows/phpunit-mariadb.yml @@ -107,6 +107,7 @@ jobs: - name: Checkout teams dependency uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false repository: nextcloud/circles ref: ${{ matrix.server-versions }} path: apps/circles diff --git a/.github/workflows/phpunit-mysql.yml b/.github/workflows/phpunit-mysql.yml index f3557cbb4..dae5e13a5 100644 --- a/.github/workflows/phpunit-mysql.yml +++ b/.github/workflows/phpunit-mysql.yml @@ -105,6 +105,7 @@ jobs: - name: Checkout teams dependency uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false repository: nextcloud/circles ref: ${{ matrix.server-versions }} path: apps/circles diff --git a/.github/workflows/phpunit-oci.yml b/.github/workflows/phpunit-oci.yml index b8cac586e..fb17c7590 100644 --- a/.github/workflows/phpunit-oci.yml +++ b/.github/workflows/phpunit-oci.yml @@ -117,6 +117,7 @@ jobs: - name: Checkout teams dependency uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false repository: nextcloud/circles ref: ${{ matrix.server-versions }} path: apps/circles diff --git a/.github/workflows/phpunit-pgsql.yml b/.github/workflows/phpunit-pgsql.yml index 19abd68cb..fb02c1c92 100644 --- a/.github/workflows/phpunit-pgsql.yml +++ b/.github/workflows/phpunit-pgsql.yml @@ -108,6 +108,7 @@ jobs: - name: Checkout teams dependency uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false repository: nextcloud/circles ref: ${{ matrix.server-versions }} path: apps/circles diff --git a/.github/workflows/phpunit-sqlite.yml b/.github/workflows/phpunit-sqlite.yml index adc9016f0..d816a991a 100644 --- a/.github/workflows/phpunit-sqlite.yml +++ b/.github/workflows/phpunit-sqlite.yml @@ -97,6 +97,7 @@ jobs: - name: Checkout teams app uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false repository: nextcloud/circles ref: ${{ matrix.server-versions }} path: apps/circles @@ -104,6 +105,7 @@ jobs: - name: Checkout analytics app uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: + persist-credentials: false repository: rello/analytics ref: master path: apps/analytics diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml index 031a4a40c..cc6032a0c 100644 --- a/.github/workflows/playwright.yml +++ b/.github/workflows/playwright.yml @@ -5,6 +5,9 @@ on: pull_request: branches: [main] +permissions: + contents: read + jobs: test: timeout-minutes: 60 @@ -12,6 +15,8 @@ jobs: steps: - name: Checkout app uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + with: + persist-credentials: false - name: Check composer.json id: check_composer @@ -49,7 +54,7 @@ jobs: - name: Run Playwright tests run: npx playwright test - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: always() with: name: playwright-report