ci: pin actions (#1132)
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
commite6a6cbe995507c3b093c21025ff276ca8db2ace9
authorCarlos Alexandro Becker <caarlos0@users.noreply.github.com>
dateFri 26 Sep 2025, 12:34 (1 year ago)
parente3240a2
.github/workflows/cla.yml+1−1
@@ -22,7 +22,7 @@ jobs:
2222 github.event.comment.body == 'recheck' ||
2323 github.event.comment.body == 'I have read the Contributor License Agreement (CLA) and hereby sign the CLA.' ||
2424 github.event_name == 'pull_request_target'
25− uses: contributor-assistant/github-action@v2.6.1
25+ uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1
2626 env:
2727 GITHUB_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
2828 with:
.github/workflows/labeler.yml+1−1
@@ -20,7 +20,7 @@ jobs:
2020 triage:
2121 runs-on: ubuntu-latest
2222 steps:
23− - uses: github/issue-labeler@v3.4
23+ - uses: github/issue-labeler@c1b0f9f52a63158c4adc09425e858e87b32e9685 # v3.4
2424 with:
2525 configuration-path: .github/labeler.yml
2626 enable-versioned-regex: 0
.github/workflows/nightly.yml+1−1
@@ -11,7 +11,7 @@ jobs:
1111 outputs:
1212 should_run: ${{ steps.check.outputs.should_run }}
1313 steps:
14− - uses: actions/checkout@v5
14+ - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
1515 with:
1616 fetch-depth: 1
1717 - id: check
.github/workflows/schema-update.yml+2−2
@@ -10,10 +10,10 @@ jobs:
1010 update-schema:
1111 runs-on: ubuntu-latest
1212 steps:
13− - uses: actions/checkout@v5
13+ - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
1414 with:
1515 token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
16− - uses: actions/setup-go@v6
16+ - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
1717 with:
1818 go-version-file: go.mod
1919 - run: go run . schema > ./schema.json