Merge pull request #8 from hartwork/pin-github-actions-at-commit-level

Pin GitHub Actions to specific commits for security
hartwork · Apr 18, 2023 · 2a7236d · 2a7236d
2 parents faa6d6c + d149af3
commit 2a7236d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
@@ -14,7 +14,7 @@ jobs:
     name: Build and test
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab  # v3.5.2
 
       - name: Install build dependencies
         run: |-

diff --git a/.github/workflows/debian_package.yml b/.github/workflows/debian_package.yml
@@ -14,7 +14,7 @@ jobs:
     name: Build Debian package
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab  # v3.5.2
 
       - name: Install build dependencies
         run: |-