ci: Pin GH actions to SHAs

[jangalda-nsc]

Jira: NCSDK-32440

[NordicBuilder]

CI Information

^{To view the history of this post, clich the 'edited' button above}
Build number: 2

Inputs:

Sources:

sdk-nrf: PR head: 013c3dcf1efa1d3c8c8c27d416318ae7322e6802

more details

sdk-nrf:

PR head: 013c3dcf1efa1d3c8c8c27d416318ae7322e6802
merge base: bb30f3a00e9acd5b23b403308cbf926d8b66da8e
target head (main): bb30f3a00e9acd5b23b403308cbf926d8b66da8e
Diff

Github labels

Enabled	Name	Description
	ci-disabled	Disable the ci execution
	ci-all-test	Run all of ci, no test spec filtering will be done
	ci-force-downstream	Force execution of downstream even if twister fails
	ci-run-twister	Force run twister
	ci-run-zephyr-twister	Force run zephyr twister

List of changed files detected by CI (14)

.github
│  ├── workflows
│  │  ├── backport.yml
│  │  ├── compliance.yml
│  │  ├── contribs.yml
│  │  ├── docbuild.yml
│  │  ├── docker.yml
│  │  ├── docpublish.yml
│  │  ├── enforce-toolchain-synchronization.yml
│  │  ├── labeler.yml
│  │  ├── license-reusable.yml
│  │  ├── manifest.yml
│  │  ├── scripts-test.yml
│  │  ├── src-mirror.yml
│  │  ├── stale.yml
│  │  │ validate-pip-requirements-fixed-file.yml

Outputs:

Toolchain

Version:
Build docker image:

Test Spec & Results: ✅ Success; ❌ Failure; 🟠 Queued; 🟡 Progress; ◻️ Skipped; ⚠️ Quarantine

• ◻️ Toolchain
• ◻️ Build twister
• ◻️ Integration tests

Disabled integration tests

• • desktop52_verification
  • doc-internal
  • test-fw-nrfconnect-apps
  • test-fw-nrfconnect-ble_samples
  • test-fw-nrfconnect-boot
  • test-fw-nrfconnect-chip
  • test-fw-nrfconnect-fem
  • test-fw-nrfconnect-nfc
  • test-fw-nrfconnect-nrf-iot_cloud
  • test-fw-nrfconnect-nrf-iot_libmodem-nrf
  • test-fw-nrfconnect-nrf-iot_mosh
  • test-fw-nrfconnect-nrf-iot_positioning
  • test-fw-nrfconnect-nrf-iot_samples
  • test-fw-nrfconnect-nrf-iot_serial_lte_modem
  • test-fw-nrfconnect-nrf-iot_thingy91
  • test-fw-nrfconnect-nrf-iot_zephyr_lwm2m
  • test-fw-nrfconnect-nrf_crypto
  • test-fw-nrfconnect-proprietary_esb
  • test-fw-nrfconnect-ps
  • test-fw-nrfconnect-rpc
  • test-fw-nrfconnect-rs
  • test-fw-nrfconnect-tfm
  • test-fw-nrfconnect-thread
  • test-low-level
  • test-sdk-audio
  • test-sdk-dfu
  • test-sdk-find-my
  • test-sdk-mcuboot
  • test-sdk-pmic-samples
  • test-sdk-wifi
  • test-secdom-samples-public

Note: This message is automatically posted and updated by the CI

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

You can find the documentation preview for this PR here.

[karhama]

What is gain of moving our internal actions from main to SHA? I propose keep those pointing to main and inside those actions one could think about pointing to SHAs (for any external dependencies).

[karhama]

some leftover (.0.0) here

[thst-nordic]

add 'SHA #v5'