From 6d0a91b55c12847df70b8304104c22d9d3d49b2c Mon Sep 17 00:00:00 2001 From: Daniel Roe Date: Wed, 11 Feb 2026 16:43:22 +0000 Subject: [PATCH] ci: pin github actions to full-length commit shas --- .github/workflows/ci.yml | 4 ++-- .github/workflows/provenance.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 605082e..7248148 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -13,9 +13,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - run: corepack enable - - uses: actions/setup-node@v6 + - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6 with: node-version: lts/* cache: "pnpm" diff --git a/.github/workflows/provenance.yml b/.github/workflows/provenance.yml index 56cc103..e2300d8 100644 --- a/.github/workflows/provenance.yml +++ b/.github/workflows/provenance.yml @@ -13,7 +13,7 @@ jobs: check-provenance: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: fetch-depth: 0 - name: Check provenance downgrades -- 2.51.2