Pin github action to SHA

Signed-off-by: yubiuser <github@yubiuser.dev>
2026-04-20 08:49:14 +01:00 · 2025-08-27 21:05:13 +02:00
parent d799d39d25
commit ef76839fa8
8 changed files with 15 additions and 15 deletions
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -19,12 +19,12 @@ jobs:

    steps:
      - name: Clone repository
-        uses: actions/checkout@v5.0.0
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0
        with:
          persist-credentials: false

      - name: Set up Node.js
-        uses: actions/setup-node@v4.4.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 #v4.4.0
        with:
          node-version: "22.x"
          cache: npm