Pin GitHub Actions to full-length commit SHAs (#41325)
Dan Fiedler committed
Aug 13, 2026 at 11:34 UTC
891f413f9bfc55c993d942d4f305e434364a7404
7 files changed
+19
-8
.github/dependabot.yml
new
+11
@@ -0,0 +1,11 @@
1
+version: 2
2
+updates:
3
+ - package-ecosystem: "github-actions"
4
+ directory: "/"
5
+ groups:
6
+ github-actions:
7
+ patterns: ["*"]
8
+ schedule:
9
+ interval: "weekly"
10
+ cooldown:
11
+ default-days: 7
.github/workflows/distributions.yml
+1
-1
@@ -15,7 +15,7 @@ jobs:
15
runs-on: ubuntu-latest
16
steps:
17
- name: Checkout repo
18
- uses: actions/checkout@v4
18
+ uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
19
20
- name: Run validation
21
run: python distributions/validate.py distributions/DistributionInfo.json
.github/workflows/documentation.yml
+3
-3
@@ -18,7 +18,7 @@ jobs:
18
contents: read
19
steps:
20
- name: Checkout actions
21
- uses: actions/checkout@v4
21
+ uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
22
23
- name: Install packages
24
run: pip install -r doc/requirements.txt --break-system-packages
@@ -28,7 +28,7 @@ jobs:
28
run: mkdocs build -f doc/mkdocs.yml
29
shell: bash
30
31
- - uses: actions/upload-pages-artifact@v4
31
+ - uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4.0.0
32
with:
33
path: doc/site
34
@@ -46,4 +46,4 @@ jobs:
46
steps:
47
- name: Deploy to GitHub Pages
48
id: deployment
49
- uses: actions/deploy-pages@v4
49
+ uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5
.github/workflows/issue_edited.yml
+1
-1
@@ -13,7 +13,7 @@ jobs:
13
issues: write
14
steps:
15
- name: Checkout repo
16
- uses: actions/checkout@v4
16
+ uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
17
18
- uses: ./.github/actions/triage
19
with:
.github/workflows/modern-distributions.yml
+1
-1
@@ -13,7 +13,7 @@ jobs:
13
runs-on: ubuntu-latest
14
steps:
15
- name: Checkout repo
16
- uses: actions/checkout@v4
16
+ uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
17
with:
18
fetch-depth: 0
19
.github/workflows/new_issue.yml
+1
-1
@@ -13,7 +13,7 @@ jobs:
13
issues: write
14
steps:
15
- name: Checkout repo
16
- uses: actions/checkout@v4
16
+ uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
17
18
- uses: ./.github/actions/triage
19
with:
.github/workflows/new_issue_comment.yml
+1
-1
@@ -14,7 +14,7 @@ jobs:
14
if: ${{ !github.event.issue.pull_request && github.event.issue.user.id == github.event.comment.user.id }}
15
steps:
16
- name: Checkout repo
17
- uses: actions/checkout@v6
17
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
18
19
- uses: ./.github/actions/triage
20
with: