From e4dba01464e25bcaefb85f3266e25e096ad6024f Mon Sep 17 00:00:00 2001 From: Padraic Slattery Date: Thu, 19 Feb 2026 17:36:19 +0100 Subject: [PATCH] chore: Pin GitHub Actions to commit SHAs --- .github/workflows/boilerplate-checks.yml | 2 +- .github/workflows/boilerplate-release.yml | 4 ++-- .github/workflows/documentation-checks.yml | 2 +- .github/workflows/documentation-release.yml | 4 ++-- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/boilerplate-checks.yml b/.github/workflows/boilerplate-checks.yml index 8cbef23f2..b3d61e6f8 100644 --- a/.github/workflows/boilerplate-checks.yml +++ b/.github/workflows/boilerplate-checks.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 - uses: ./.github/actions/deps-setup with: working_directory: ./template diff --git a/.github/workflows/boilerplate-release.yml b/.github/workflows/boilerplate-release.yml index 25563ee3b..645b7437d 100644 --- a/.github/workflows/boilerplate-release.yml +++ b/.github/workflows/boilerplate-release.yml @@ -8,10 +8,10 @@ jobs: publish: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 with: ref: ${{ github.event.release.target_commitish }} - - uses: actions/setup-node@v3 + - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 #v3 with: node-version: '20.x' registry-url: 'https://registry.npmjs.org' diff --git a/.github/workflows/documentation-checks.yml b/.github/workflows/documentation-checks.yml index b06807a97..059e2d709 100644 --- a/.github/workflows/documentation-checks.yml +++ b/.github/workflows/documentation-checks.yml @@ -22,7 +22,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 - uses: ./.github/actions/deps-setup with: working_directory: ./documentation diff --git a/.github/workflows/documentation-release.yml b/.github/workflows/documentation-release.yml index 4ad0019cf..2c7d45c5f 100644 --- a/.github/workflows/documentation-release.yml +++ b/.github/workflows/documentation-release.yml @@ -12,8 +12,8 @@ jobs: deploy_doc: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 #v4 with: node-version: '20.x' cache: 'yarn'