Merge pull request #35 from elbeno/update-workflow-perms

👷 Use github workflow actions by hash

Author: elbeno

.github/workflows/asciidoctor-ghpages.yml

@@ -1,4 +1,5 @@
 name: Publish GitHub Pages
+permissions: read-all
 
 on:
   workflow_dispatch:
@@ -32,7 +33,15 @@ jobs:
     runs-on: ${{ github.repository_owner == 'intel' && 'intel-' || '' }}ubuntu-22.04
     steps:
       - name: Checkout source
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - name: Setup Node.js
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1
+        with:
+          node-version: 18
+      - name: Install Mermaid
+        run: |
+          sudo npm install -g @mermaid-js/mermaid-cli@10.6.1
+          node /usr/local/lib/node_modules/@mermaid-js/mermaid-cli/node_modules/puppeteer/install.js
       - name: Install asciidoctor
         run: |
           sudo apt update
@@ -45,12 +54,11 @@ jobs:
           if [ -e docs/static ]; then cp -rf docs/static ./generated-html; fi
           touch ./generated-html/.nojekyll
           ls -la ./generated-html
-          cat ./generated-html/index.html
       - name: Setup github pages
         if: needs.configure.outputs.enable_publish == 'true'
-        uses: actions/configure-pages@v4
+        uses: actions/configure-pages@1f0c5cde4bc74cd7e1254d0cb4de8d49e9068c7d # v4.0.0
       - name: Upload artifacts
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@0252fc4ba7626f0298f0cf00902a25c6afc77fa8 # v3.0.0
         with:
           path: ./generated-html
 
@@ -69,4 +77,4 @@ jobs:
     steps:
       - name: Deploy to github pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@87c3283f01cd6fe19a0ab93a23b2f6fcba5a8e42 # v4.0.3

.github/workflows/unit_tests.yml

@@ -1,4 +1,5 @@
 name: Unit Tests
+permissions: read-all
 
 on:
   workflow_dispatch:
@@ -105,7 +106,7 @@ jobs:
             stdlib: libc++
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Install build tools
         run: |
@@ -128,7 +129,7 @@ jobs:
   quality_checks_pass:
     runs-on: ${{ github.repository_owner == 'intel' && 'intel-' || '' }}ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Install build tools
         run: |
@@ -157,7 +158,7 @@ jobs:
         sanitizer: [undefined, address, thread]
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Install build tools
         run: |
@@ -177,7 +178,7 @@ jobs:
   valgrind:
     runs-on: ${{ github.repository_owner == 'intel' && 'intel-' || '' }}ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Install build tools
         run: sudo apt update && sudo apt install -y gcc-12 ninja-build valgrind