Pin GitHub Actions to commit SHAs

2026-10-21 07:35:30 +00:00
parent d422b4db8c
commit 3b6519f169
3 changed files with 20 additions and 20 deletions
@@ -25,7 +25,7 @@ jobs:
      group: upstream-sync-golangci-lint
      cancel-in-progress: true
    steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          ssh-key: ${{ secrets.AUTOMATION_SSH_KEY }}

@@ -47,13 +47,13 @@ jobs:
      - if: steps.detect.outputs.changed == 'true'
        id: lint
        continue-on-error: true
-        uses: golangci/golangci-lint-action@v9
+        uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0
        with:
          version: ${{ steps.detect.outputs.latest }}

      - if: steps.detect.outputs.changed == 'true'
        id: pr
-        uses: peter-evans/create-pull-request@v8
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
        with:
          branch: automation/golangci-lint-version-sync
          delete-branch: true