From 0a567f036978f54cb2553917d3baab16e6f49398 Mon Sep 17 00:00:00 2001 From: EdwardWills-nhs Date: Wed, 3 Jun 2026 12:50:10 +0000 Subject: [PATCH] pin GitHub Actions to latest versions with commit SHAs --- .github/workflows/combine-prs.yml | 2 +- .github/workflows/continous-integration-workflow.yaml | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/combine-prs.yml b/.github/workflows/combine-prs.yml index 1a0923113..183855982 100644 --- a/.github/workflows/combine-prs.yml +++ b/.github/workflows/combine-prs.yml @@ -41,7 +41,7 @@ jobs: # Steps represent a sequence of tasks that will be executed as part of the job steps: - - uses: actions/github-script@v8 + - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 id: create-combined-pr name: Create Combined PR with: diff --git a/.github/workflows/continous-integration-workflow.yaml b/.github/workflows/continous-integration-workflow.yaml index f8235c867..6d6c290cb 100644 --- a/.github/workflows/continous-integration-workflow.yaml +++ b/.github/workflows/continous-integration-workflow.yaml @@ -8,12 +8,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: fetch-depth: 0 # This causes all history to be fetched, which is required for calculate-version to function - name: Install Python 3.13 - uses: actions/setup-python@v6 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: python-version: '3.13' @@ -34,7 +34,7 @@ jobs: - name: Create release (master only) id: create-release if: github.ref == 'refs/heads/master' - uses: actions/create-release@v1 + uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1.1.4 continue-on-error: true env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}