From 30e8077e9f3b9d9c1c935153aaf0b0f835dafaa3 Mon Sep 17 00:00:00 2001 From: Frazer Smith Date: Mon, 20 Jul 2026 06:41:55 +0100 Subject: [PATCH] ci: pin actions to commit-hash --- .github/workflows/ci.yml | 2 +- .github/workflows/lock-threads.yml | 2 +- templates/plugin/.github/workflows/ci.yml | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f1c03fc7..2244fc30 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -27,6 +27,6 @@ jobs: permissions: contents: write pull-requests: write - uses: fastify/workflows/.github/workflows/plugins-ci.yml@v6 + uses: fastify/workflows/.github/workflows/plugins-ci.yml@2073dc8e1f9e172bf42daa3843c9dbd31af1e8cb # v6.0.0 with: lint: true diff --git a/.github/workflows/lock-threads.yml b/.github/workflows/lock-threads.yml index bd263f2d..3c10b106 100644 --- a/.github/workflows/lock-threads.yml +++ b/.github/workflows/lock-threads.yml @@ -16,4 +16,4 @@ jobs: permissions: issues: write pull-requests: write - uses: fastify/workflows/.github/workflows/lock-threads.yml@v6 + uses: fastify/workflows/.github/workflows/lock-threads.yml@2073dc8e1f9e172bf42daa3843c9dbd31af1e8cb # v6.0.0 diff --git a/templates/plugin/.github/workflows/ci.yml b/templates/plugin/.github/workflows/ci.yml index b9549e82..48e8f4a0 100644 --- a/templates/plugin/.github/workflows/ci.yml +++ b/templates/plugin/.github/workflows/ci.yml @@ -12,11 +12,11 @@ jobs: node-version: [22, 24] os: [macos-latest, ubuntu-latest, windows-latest] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v4 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: check-latest: true node-version: ${{ matrix.node-version }}