From 966df5239dee9e67976b6ba27b2ec3ff23dc38ee Mon Sep 17 00:00:00 2001 From: Drew Hintz Date: Thu, 30 Apr 2026 23:42:20 -0500 Subject: [PATCH] Pin GitHub Actions workflow references --- .github/workflows/kong.yml | 2 +- .github/workflows/scheduler.yml | 2 +- .github/workflows/tests.yml | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/kong.yml b/.github/workflows/kong.yml index 48a38dc..bdd2e8f 100644 --- a/.github/workflows/kong.yml +++ b/.github/workflows/kong.yml @@ -16,7 +16,7 @@ jobs: run: | git clone https://${{ secrets.KONG_FINE_GRAINED_REPO_PAT }}@github.com/statsig-io/kong.git - - uses: dart-lang/setup-dart@v1.3 + - uses: dart-lang/setup-dart@6a218f2413a3e78e9087f638a238f6b40893203d # v1.3 - name: Setup Dart Server run: | diff --git a/.github/workflows/scheduler.yml b/.github/workflows/scheduler.yml index a41bf7b..409aea9 100644 --- a/.github/workflows/scheduler.yml +++ b/.github/workflows/scheduler.yml @@ -11,7 +11,7 @@ jobs: steps: - name: Trigger Scheduled Test Runs if: github.event.repository.private - uses: actions/github-script@v6 + uses: actions/github-script@00f12e3e20659f42342b1c0226afda7f7c042325 # v6 with: script: | const args = { diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 53c18c6..049e325 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -11,8 +11,8 @@ jobs: run-tests: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 - - uses: dart-lang/setup-dart@v1.3 + - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 + - uses: dart-lang/setup-dart@6a218f2413a3e78e9087f638a238f6b40893203d # v1.3 with: sdk: 3.0.0 - name: Run Tests