Merge pull request #162 from Ocelot-Social-Community/pin-all-github-a…

…ctions-by-commit-hash refactor(workflow): pin all github actions by commit hash
Ocelot-Social-Community · Aug 29, 2024 · ff34227 · ff34227
2 parents ad5515e + ce822be
commit ff34227
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 8 deletions.
diff --git a/.github/workflows/lint_pr.yml b/.github/workflows/lint_pr.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.actor != 'dependabot[bot]' }}
     steps:
-      - uses: amannn/action-semantic-pull-request@v5
+      - uses: amannn/action-semantic-pull-request@80c0371c57c5142ed6c844270bba1864bac8a4c6 # v5.5.3 # v5.5.3
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:

diff --git a/.github/workflows/test-build.yml b/.github/workflows/test-build.yml
@@ -8,10 +8,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@9a9194f87191a7e9055e3e9b95b8cfb13023bb08 # v4.1.7
 
       - name: Setup Node 20
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@26961cf329f22f6837d5f54c3efd76b480300ace # v4.0.3
         with:
           node-version: '20'
 

diff --git a/.github/workflows/test-lint.yml b/.github/workflows/test-lint.yml
@@ -8,10 +8,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@9a9194f87191a7e9055e3e9b95b8cfb13023bb08 # v4.1.7
 
       - name: Setup Node 20
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@26961cf329f22f6837d5f54c3efd76b480300ace # v4.0.3
         with:
           node-version: '20'
 

diff --git a/.github/workflows/vuepress-deploy.yml b/.github/workflows/vuepress-deploy.yml
@@ -10,10 +10,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@master
+      uses: actions/checkoutactions/checkout@9a9194f87191a7e9055e3e9b95b8cfb13023bb08 # v4.1.7
 
     - name: Setup Node 20
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@26961cf329f22f6837d5f54c3efd76b480300ace # v4.0.3
       with:
         node-version: 20
 
@@ -23,7 +23,7 @@ jobs:
       #   VUEPRESS_BASE: '/ocelot.social/'
 
     - name: Deploy Vuepress to Github Pages
-      uses: crazy-max/ghaction-github-pages@v4
+      uses: crazy-max/ghaction-github-pages@cda5497acf90563d34489ed832a67c2c50353a16 # v4.0.0
       with:
         target_branch: gh-pages
         build_dir: docs/.vuepress/dist