git.iko.soy/crush
on main help sign in
ci: pin actions (#1132)
e6a6cbeCarlos Alexandro Becker
.github/workflows/cla.yml+1−1
compare with main
unifiedsplit
@@ -22,7 +22,7 @@ jobs:
22 github.event.comment.body == 'recheck' ||
22 github.event.comment.body == 'recheck' ||
23 github.event.comment.body == 'I have read the Contributor License Agreement (CLA) and hereby sign the CLA.' ||
23 github.event.comment.body == 'I have read the Contributor License Agreement (CLA) and hereby sign the CLA.' ||
24 github.event_name == 'pull_request_target'
24 github.event_name == 'pull_request_target'
25− uses: contributor-assistant/github-action@v2.6.1
25+ uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1
26 env:
26 env:
27 GITHUB_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
27 GITHUB_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
28 with:
28 with:
.github/workflows/labeler.yml+1−1
@@ -20,7 +20,7 @@ jobs:
20 triage:
20 triage:
21 runs-on: ubuntu-latest
21 runs-on: ubuntu-latest
22 steps:
22 steps:
23− - uses: github/issue-labeler@v3.4
23+ - uses: github/issue-labeler@c1b0f9f52a63158c4adc09425e858e87b32e9685 # v3.4
24 with:
24 with:
25 configuration-path: .github/labeler.yml
25 configuration-path: .github/labeler.yml
26 enable-versioned-regex: 0
26 enable-versioned-regex: 0
.github/workflows/nightly.yml+1−1
@@ -11,7 +11,7 @@ jobs:
11 outputs:
11 outputs:
12 should_run: ${{ steps.check.outputs.should_run }}
12 should_run: ${{ steps.check.outputs.should_run }}
13 steps:
13 steps:
14− - uses: actions/checkout@v5
14+ - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
15 with:
15 with:
16 fetch-depth: 1
16 fetch-depth: 1
17 - id: check
17 - id: check
.github/workflows/schema-update.yml+2−2
@@ -10,10 +10,10 @@ jobs:
10 update-schema:
10 update-schema:
11 runs-on: ubuntu-latest
11 runs-on: ubuntu-latest
12 steps:
12 steps:
13− - uses: actions/checkout@v5
13+ - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
14 with:
14 with:
15 token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
15 token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
16− - uses: actions/setup-go@v6
16+ - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
17 with:
17 with:
18 go-version-file: go.mod
18 go-version-file: go.mod
19 - run: go run . schema > ./schema.json
19 - run: go run . schema > ./schema.json