From d20281543004af01a664e9c4daedac01ae859a32 Mon Sep 17 00:00:00 2001 From: Tyler Gohl Date: Wed, 20 May 2026 21:38:17 -0400 Subject: [PATCH 1/2] Pin actions to SHAs in main.yaml --- .github/workflows/main.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml index 397778e28..80538168c 100644 --- a/.github/workflows/main.yaml +++ b/.github/workflows/main.yaml @@ -10,20 +10,20 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: fetch-depth: 0 fetch-tags: true - name: Login to GitHub Container Registry - uses: docker/login-action@v3 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3 - name: Build/Push to GitHub Container Registry run: From cf496ffc918532b2142c48a93329fa256933b2fe Mon Sep 17 00:00:00 2001 From: Tyler Gohl Date: Wed, 20 May 2026 21:38:19 -0400 Subject: [PATCH 2/2] Pin actions to SHAs in pr.yaml --- .github/workflows/pr.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index e211d0b65..42d67db1d 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: fetch-depth: 0 fetch-tags: true