From 355e68284ffcf115637bb430b9c70752b449f6aa Mon Sep 17 00:00:00 2001 From: Adam Moussa Date: Wed, 29 Jul 2026 11:49:21 -0400 Subject: [PATCH] ci: pin checkout and setup-python actions to commit SHAs --- .github/workflows/changelog-guard.yml | 4 ++-- .github/workflows/deploy.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/changelog-guard.yml b/.github/workflows/changelog-guard.yml index a075bc4..f2fe3c7 100644 --- a/.github/workflows/changelog-guard.yml +++ b/.github/workflows/changelog-guard.yml @@ -14,12 +14,12 @@ jobs: guard: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 fetch-tags: true - - uses: actions/setup-python@v7 + - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.12" diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml index 8610dd6..b104622 100644 --- a/.github/workflows/deploy.yaml +++ b/.github/workflows/deploy.yaml @@ -36,12 +36,12 @@ jobs: contents: write # create the tag + GitHub Release id-token: write # OIDC to assume the notifier-invoke role steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 fetch-tags: true - - uses: actions/setup-python@v7 + - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.12"