From ab2a4d43419ab30bb6d3680a7777f1899563cc19 Mon Sep 17 00:00:00 2001 From: Xeboc Date: Thu, 2 Apr 2026 16:42:25 -0600 Subject: [PATCH] fix: pin GitHub Actions to commit SHAs (INT-326) --- .github/workflows/lint.yaml | 4 ++-- .github/workflows/trunk-upgrade.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 092d215..9c53a4b 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -13,6 +13,6 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out Git repository - uses: actions/checkout@v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Trunk Check - uses: trunk-io/trunk-action@v1 + uses: trunk-io/trunk-action@75699af9e26881e564e9d832ef7dc3af25ec031b # v1.2.4 diff --git a/.github/workflows/trunk-upgrade.yaml b/.github/workflows/trunk-upgrade.yaml index 7aaf26c..1abdaf5 100644 --- a/.github/workflows/trunk-upgrade.yaml +++ b/.github/workflows/trunk-upgrade.yaml @@ -17,10 +17,10 @@ jobs: pull-requests: write steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Run Trunk Upgrade - uses: masterpointio/github-action-trunk-upgrade@v0.1.0 + uses: masterpointio/github-action-trunk-upgrade@a79fd65d524d92031fe167daee411d2f25d4a999 # v0.1.0 with: app-id: ${{ secrets.MP_BOT_APP_ID }} app-private-key: ${{ secrets.MP_BOT_APP_PRIVATE_KEY }}