Skip to content

Commit c2189b5

Browse files
github-security-botgithub-security-bot
committed
Pin GitHub Actions to commit SHAs
1 parent 88eaa80 commit c2189b5

4 files changed

Lines changed: 14 additions & 6 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: "github-actions"
4+
directory: "/"
5+
schedule:
6+
interval: "weekly"
7+
cooldown:
8+
default-days: 7

‎.github/workflows/lint.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,12 +21,12 @@ jobs:
2121

2222
steps:
2323
- name: Set up Go
24-
uses: actions/setup-go@v2
24+
uses: actions/setup-go@bfdd3570ce990073878bf10f6b2d79082de49492 # v2.2.0
2525
with:
2626
go-version: 1.17
2727

2828
- name: Check out code
29-
uses: actions/checkout@v2
29+
uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
3030

3131
- name: Verify dependencies
3232
run: |

‎.github/workflows/release.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,14 +21,14 @@ jobs:
2121
go-version: 1.21
2222

2323
- name: Checkout
24-
uses: actions/checkout@v4
24+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
2525

2626
- name: Build releases
2727
run: |
2828
make releases VERSION=$GITHUB_REF_NAME
2929
3030
- name: Release
31-
uses: softprops/action-gh-release@v1
31+
uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1
3232
with:
3333
draft: true
3434
files: |

‎.github/workflows/test.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,12 +12,12 @@ jobs:
1212
runs-on: ${{ matrix.os }}
1313
steps:
1414
- name: Set up Go
15-
uses: actions/setup-go@v6
15+
uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
1616
with:
1717
go-version: '1.21.3'
1818

1919
- name: Check out code
20-
uses: actions/checkout@v2
20+
uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
2121

2222
- name: Get full repo history
2323
run: git fetch --prune --unshallow --tags

0 commit comments

Comments
 (0)