From 5eb5320a0de735a44c67d3553c14827c3a7dfc95 Mon Sep 17 00:00:00 2001 From: Nick Collisson Date: Wed, 2 Apr 2025 14:43:50 -0400 Subject: [PATCH] Pin third-party actions to currently used SHA --- .github/workflows/ci.yaml | 4 ++-- .github/workflows/release.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 336c964..fc6ad90 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -29,7 +29,7 @@ jobs: run: go build working-directory: cmd/workos - name: GoReleaser Check - uses: goreleaser/goreleaser-action@v6 + uses: goreleaser/goreleaser-action@90a3faa9d0182683851fbfa97ca1a2cb983bfca3 # v6.2.1 with: distribution: goreleaser version: latest @@ -48,7 +48,7 @@ jobs: with: fetch-depth: 0 - name: Run golangci-lint - uses: golangci/golangci-lint-action@v6 + uses: golangci/golangci-lint-action@55c2c1448f86e01eaae002a5a3a9624417608d84 # v6.5.2 with: version: latest args: -v --timeout=5m diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 6a71879..682730d 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -17,7 +17,7 @@ jobs: with: fetch-depth: 0 - name: Release with GoReleaser - uses: goreleaser/goreleaser-action@v6 + uses: goreleaser/goreleaser-action@9c156ee8a17a598857849441385a2041ef570552 # v6.3.0 with: distribution: goreleaser version: latest