Bump the github-actions group with 2 updates

.github/workflows/generic-dev.yml

@@ -25,21 +25,21 @@ jobs:
   benchmarking:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: make benchmarking
       run: make benchmarking
 
   test:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: make test
       run: make test
 
   gcc-6-7-libzstd:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: gcc-6 + gcc-7 + libzstdmt compilation
       run: |
         make gcc6install gcc7install
@@ -53,7 +53,7 @@ jobs:
   gcc-8-asan-ubsan-testzstd:
     runs-on: ubuntu-16.04 # fails on 18.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: gcc-8 + ASan + UBSan + Test Zstd
       run: |
         make gcc8install
@@ -64,7 +64,7 @@ jobs:
   gcc-6-asan-ubsan-testzstd-32bit:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: gcc-6 + ASan + UBSan + Test Zstd, 32bit mode
       run: |
         make gcc6install libc6install
@@ -75,7 +75,7 @@ jobs:
   clang-38-msan-testzstd:
     runs-on: ubuntu-16.04 # fails on 18.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: clang-3.8 + MSan + Test Zstd
       run: |
         # make clang38install (doesn't work)
@@ -87,7 +87,7 @@ jobs:
   cmake-build-and-test-check:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: cmake build and test check
       run: |
         FUZZERTEST=-T1mn ZSTREAM_TESTTIME=-T1mn make cmakebuild
@@ -98,7 +98,7 @@ jobs:
   gcc-8-asan-ubsan-fuzz:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: gcc-8 + ASan + UBSan + Fuzz Test
       run: |
         make gcc8install
@@ -107,7 +107,7 @@ jobs:
   gcc-6-asan-ubsan-fuzz32:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: gcc-6 + ASan + UBSan + Fuzz Test 32bit
       run: |
         make gcc6install libc6install
@@ -116,7 +116,7 @@ jobs:
   clang-38-msan-fuzz:
     runs-on: ubuntu-16.04 # fails on 18.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: clang-3.8 + MSan + Fuzz Test
       run: |
         # make clang38install (doesn't work)
@@ -128,7 +128,7 @@ jobs:
   asan-ubsan-msan-regression:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: ASan + UBSan + MSan + Regression Test
       run: |
         make -j uasanregressiontest
@@ -138,7 +138,7 @@ jobs:
   cpp-gnu90-c99-compatibility:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: C++, gnu90 and c99 compatibility
       run: |
         make cxxtest
@@ -152,7 +152,7 @@ jobs:
   mingw-cross-compilation:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: mingw cross-compilation
       run: |
         # sudo update-alternatives --set x86_64-w64-mingw32-g++ /usr/bin/x86_64-w64-mingw32-g++-posix; (doesn't work)
@@ -163,7 +163,7 @@ jobs:
 #  armbuild:
 #    runs-on: ubuntu-16.04 # doesn't work on latest
 #    steps:
-#    - uses: actions/checkout@v2
+#    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 #    - name: ARM Build Test
 #      run: |
 #        make arminstall
@@ -173,7 +173,7 @@ jobs:
 #  armfuzz:
 #    runs-on: ubuntu-16.04 # doesn't work on latest
 #    steps:
-#    - uses: actions/checkout@v2
+#    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 #    - name: Qemu ARM emulation + Fuzz Test
 #      run: |
 #        make arminstall
@@ -182,7 +182,7 @@ jobs:
   bourne-shell:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Bourne shell compatibility (shellcheck)
       run: |
         wget https://github.com/koalaman/shellcheck/releases/download/v0.7.1/shellcheck-v0.7.1.linux.x86_64.tar.xz
@@ -203,7 +203,7 @@ jobs:
         sudo add-apt-repository "deb https://apt.repos.intel.com/oneapi all main"
         sudo apt-get update
         sudo apt-get install -y intel-basekit intel-hpckit
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: make check
       run: |
         make CC=/opt/intel/oneapi/compiler/latest/linux/bin/intel64/icc check

.github/workflows/generic-release.yml

@@ -19,7 +19,7 @@ jobs:
   osx:
     runs-on: macos-10.15
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: OS-X
       run: |
         make test
@@ -28,15 +28,15 @@ jobs:
   zbuff:
     runs-on: ubuntu-16.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: zbuff test
       run: |
         make -C tests test-zbuff
 
   tsan:
     runs-on: ubuntu-16.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: thread sanitizer
       run: |
         sudo apt-add-repository "deb http://llvm.org/apt/trusty/ llvm-toolchain-trusty-3.8 main"
@@ -47,7 +47,7 @@ jobs:
   zlib-wrapper:
     runs-on: ubuntu-16.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: zlib wrapper test
       run: |
         make gpp6install valgrindinstall
@@ -57,7 +57,7 @@ jobs:
   lz4-threadpool-partial-libs:
     runs-on: ubuntu-16.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: LZ4, thread pool, and partial libs testslib wrapper test
       run: |
         make lz4install

.github/workflows/linux-kernel.yml

@@ -8,6 +8,6 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Create linux kernel library + build + test
       run: make -C contrib/linux-kernel test CFLAGS="-Werror -Wunused-const-variable -Wunused-but-set-variable"

.github/workflows/main.yml

@@ -23,7 +23,7 @@ jobs:
         dry-run: false
         sanitizer: ${{ matrix.sanitizer }}
     - name: Upload Crash
-      uses: actions/upload-artifact@v1
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.0
       if: failure() && steps.build.outcome == 'success'
       with:
         name: ${{ matrix.sanitizer }}-artifacts