Hardened Gitea Actions workflows and updated action pins.

2026-04-28 15:17:13 -04:00
parent b2688b7934
commit 231578eccb
4 changed files with 35 additions and 25 deletions
@@ -12,6 +12,9 @@ on:
 permissions:
  contents: read

+env:
+  UV_PYTHON_DOWNLOADS: never
+
 jobs:
  audit:
    name: Dependencies
@@ -23,13 +26,13 @@ jobs:
          fetch-depth: 0

      - name: Cache uv packages
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: ~/.cache/uv
          key: uv-${{ hashFiles('uv.lock') }}

      - name: Install dependencies
-        run: uv sync
+        run: uv sync --locked

      - name: Audit dependencies with pip-audit
        run: uv run pip-audit --skip-editable