66 push :
77 branches : [main, dev, stg]
88
9+ # Least-privilege default for every job (OpenSSF Token-Permissions). No job here
10+ # needs write; checkout + npm only read. Any job needing more must opt in locally.
11+ permissions :
12+ contents : read
13+
914jobs :
1015 lint :
1116 name : Lint & Format
1217 runs-on : ubuntu-latest
1318 steps :
14- - uses : actions/checkout@v5
19+ - uses : actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
1520
1621 - name : Setup Node.js
17- uses : actions/setup-node@v5
22+ uses : actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
1823 with :
1924 node-version : 22
2025 cache : ' npm'
@@ -31,10 +36,10 @@ jobs:
3136 name : Typecheck
3237 runs-on : ubuntu-latest
3338 steps :
34- - uses : actions/checkout@v5
39+ - uses : actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
3540
3641 - name : Setup Node.js
37- uses : actions/setup-node@v5
42+ uses : actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
3843 with :
3944 node-version : 22
4045 cache : ' npm'
@@ -46,10 +51,10 @@ jobs:
4651 name : Unit Tests
4752 runs-on : ubuntu-latest
4853 steps :
49- - uses : actions/checkout@v5
54+ - uses : actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
5055
5156 - name : Setup Node.js
52- uses : actions/setup-node@v5
57+ uses : actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
5358 with :
5459 node-version : 22
5560 cache : ' npm'
@@ -63,10 +68,10 @@ jobs:
6368 name : Build
6469 runs-on : ubuntu-latest
6570 steps :
66- - uses : actions/checkout@v5
71+ - uses : actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
6772
6873 - name : Setup Node.js
69- uses : actions/setup-node@v5
74+ uses : actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
7075 with :
7176 node-version : 22
7277 cache : ' npm'
@@ -83,10 +88,10 @@ jobs:
8388 name : Local E2E Tests
8489 runs-on : ubuntu-latest
8590 steps :
86- - uses : actions/checkout@v5
91+ - uses : actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
8792
8893 - name : Setup Node.js
89- uses : actions/setup-node@v5
94+ uses : actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
9095 with :
9196 node-version : 22
9297 cache : ' npm'
0 commit comments