Skip to content

Commit b78a212

Browse files
joyeecheungaduh95
joyeecheung
authored and
aduh95
committed
build: pin envinfo versions in github actions
Currently they all run `npx envinfo` without pinning the version. This can be a supply-chain risk. Signed-off-by: Joyee Cheung <[email protected]> PR-URL: #64117 Reviewed-By: Rafael Gonzaga <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Luigi Pinca <[email protected]> Reviewed-By: Marco Ippolito <[email protected]> Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Matteo Collina <[email protected]> Reviewed-By: Gürgün Dayıoğlu <[email protected]>
1 parent 3fb7220 commit b78a212

12 files changed

Lines changed: 18 additions & 18 deletions

‎.github/workflows/build-tarball.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ jobs:
4949
with:
5050
python-version: ${{ env.PYTHON_VERSION }}
5151
- name: Environment Information
52-
run: npx envinfo
52+
run: npx envinfo@7.21.0
5353
- name: Make tarball
5454
run: |
5555
export DISTTYPE=nightly
@@ -86,7 +86,7 @@ jobs:
8686
with:
8787
version: v0.16.0
8888
- name: Environment Information
89-
run: npx envinfo
89+
run: npx envinfo@7.21.0
9090
- name: Download tarball
9191
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
9292
with:

‎.github/workflows/coverage-linux-without-intl.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@ jobs:
6262
with:
6363
version: v0.16.0
6464
- name: Environment Information
65-
run: npx envinfo
65+
run: npx envinfo@7.21.0
6666
- name: Install gcovr
6767
run: pip install gcovr==7.2
6868
- name: Configure

‎.github/workflows/coverage-linux.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@ jobs:
6262
with:
6363
version: v0.16.0
6464
- name: Environment Information
65-
run: npx envinfo
65+
run: npx envinfo@7.21.0
6666
- name: Install gcovr
6767
run: pip install gcovr==7.2
6868
- name: Configure

‎.github/workflows/coverage-windows.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -79,7 +79,7 @@ jobs:
7979
- name: Install deps
8080
run: choco install nasm
8181
- name: Environment Information
82-
run: npx envinfo
82+
run: npx envinfo@7.21.0
8383
- name: Build
8484
run: ./vcbuild.bat clang-cl
8585
# TODO(bcoe): investigate tests that fail with coverage enabled

‎.github/workflows/daily-wpt-fyi.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
with:
4444
python-version: ${{ env.PYTHON_VERSION }}
4545
- name: Environment Information
46-
run: npx envinfo
46+
run: npx envinfo@7.21.0
4747

4848
# install a version and checkout
4949
- name: Get latest nightly

‎.github/workflows/daily.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
with:
2525
node-version: ${{ env.NODE_VERSION }}
2626
- name: Environment Information
27-
run: npx envinfo
27+
run: npx envinfo@7.21.0
2828
- name: Build lto
2929
run: |
3030
sudo apt-get update && sudo apt-get install ninja-build -y

‎.github/workflows/doc.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
with:
3333
node-version: ${{ env.NODE_VERSION }}
3434
- name: Environment Information
35-
run: npx envinfo
35+
run: npx envinfo@7.21.0
3636
- name: Build
3737
run: NODE=$(command -v node) make doc-only
3838
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1

‎.github/workflows/linters.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
with:
3434
node-version: ${{ env.NODE_VERSION }}
3535
- name: Environment Information
36-
run: npx envinfo
36+
run: npx envinfo@7.21.0
3737
- name: Lint addon docs
3838
run: NODE=$(command -v node) make lint-addon-docs
3939
lint-cpp:
@@ -48,7 +48,7 @@ jobs:
4848
with:
4949
python-version: ${{ env.PYTHON_VERSION }}
5050
- name: Environment Information
51-
run: npx envinfo
51+
run: npx envinfo@7.21.0
5252
- name: Lint C/C++ files
5353
run: make lint-cpp
5454
format-cpp:
@@ -68,7 +68,7 @@ jobs:
6868
with:
6969
python-version: ${{ env.PYTHON_VERSION }}
7070
- name: Environment Information
71-
run: npx envinfo
71+
run: npx envinfo@7.21.0
7272
- name: Format C/C++ files
7373
run: |
7474
make format-cpp-build
@@ -101,7 +101,7 @@ jobs:
101101
with:
102102
node-version: ${{ env.NODE_VERSION }}
103103
- name: Environment Information
104-
run: npx envinfo
104+
run: npx envinfo@7.21.0
105105
- name: Lint JavaScript files
106106
run: |
107107
set +e
@@ -160,7 +160,7 @@ jobs:
160160
with:
161161
python-version: ${{ env.PYTHON_VERSION }}
162162
- name: Environment Information
163-
run: npx envinfo
163+
run: npx envinfo@7.21.0
164164
- name: Lint Python
165165
run: |
166166
make lint-py-build
@@ -183,7 +183,7 @@ jobs:
183183
with:
184184
python-version: ${{ env.PYTHON_VERSION }}
185185
- name: Environment Information
186-
run: npx envinfo
186+
run: npx envinfo@7.21.0
187187
- name: Lint YAML
188188
run: |
189189
make lint-yaml-build || true

‎.github/workflows/test-internet.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ jobs:
5959
with:
6060
version: v0.16.0
6161
- name: Environment Information
62-
run: npx envinfo
62+
run: npx envinfo@7.21.0
6363
- name: Build
6464
run: make build-ci -j4 V=1 CONFIG_FLAGS="--error-on-warn"
6565
- name: Test Internet

‎.github/workflows/test-linux-quic.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ jobs:
5959
with:
6060
version: v0.16.0
6161
- name: Environment Information
62-
run: npx envinfo
62+
run: npx envinfo@7.21.0
6363
- name: Build
6464
working-directory: node
6565
run: make build-ci -j4 V=1 CONFIG_FLAGS="--error-on-warn --experimental-quic"

0 commit comments

Comments
 (0)