From 7697b6a69bab8cdd2da06dea9370619bb1c6e94b Mon Sep 17 00:00:00 2001 From: Hao Liu <44379968+TheRealHaoLiu@users.noreply.github.com> Date: Wed, 17 Jul 2024 16:43:45 -0400 Subject: Pin 3rd party action at SHA For safety --- .github/workflows/dab-release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to '.github') diff --git a/.github/workflows/dab-release.yml b/.github/workflows/dab-release.yml index 72f4c2d2bc..3fc88a2ecd 100644 --- a/.github/workflows/dab-release.yml +++ b/.github/workflows/dab-release.yml @@ -13,7 +13,7 @@ jobs: steps: - id: dab-release name: Get current django-ansible-base release version - uses: pozetroninc/github-action-get-latest-release@master + uses: pozetroninc/github-action-get-latest-release@2a61c339ea7ef0a336d1daa35ef0cb1418e7676c # v0.8.0 with: owner: ansible repo: django-ansible-base @@ -32,7 +32,7 @@ jobs: requirements/django-ansible-base-pinned-version.sh -s ${{ steps.dab-release.outputs.release }} - name: Create Pull Request - uses: peter-evans/create-pull-request@v6 + uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6 with: base: devel branch: bump-django-ansible-base -- cgit v1.2.3