Skip to content

Commit 6d7e066

Browse files
dependabot[bot]dependabot[bot]
authored
build(deps): Bump the actions group with 13 updates (#1)
Bumps the actions group with 13 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.1.1` | `6.0.2` | | [actions/cache](https://github.com/actions/cache) | `4.2.3` | `5.0.4` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `3` | `8` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `3` | `6` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `1` | `2` | | [actions/github-script](https://github.com/actions/github-script) | `7.0.1` | `8.0.0` | | [peter-evans/repository-dispatch](https://github.com/peter-evans/repository-dispatch) | `3.0.0` | `4.0.1` | | [actions/configure-pages](https://github.com/actions/configure-pages) | `5.0.0` | `6.0.0` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3.0.1` | `4.0.0` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4.0.5` | `5.0.0` | | [webfactory/ssh-agent](https://github.com/webfactory/ssh-agent) | `0.9.0` | `0.10.0` | | [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain) | `56f84321dbccf38fb67ce29ab63e4754056677e0` | `3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.0` | `2.4.3` | Updates `actions/checkout` from 4.1.1 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4.1.1...de0fac2) Updates `actions/cache` from 4.2.3 to 5.0.4 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@5a3ec84...6682284) Updates `actions/download-artifact` from 3 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v3...v8) Updates `codecov/codecov-action` from 3 to 6 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v3...v6) Updates `softprops/action-gh-release` from 1 to 2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@v1...v2) Updates `actions/github-script` from 7.0.1 to 8.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@60a0d83...ed59741) Updates `peter-evans/repository-dispatch` from 3.0.0 to 4.0.1 - [Release notes](https://github.com/peter-evans/repository-dispatch/releases) - [Commits](peter-evans/repository-dispatch@ff45666...28959ce) Updates `actions/configure-pages` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/configure-pages/releases) - [Commits](actions/configure-pages@983d773...45bfe01) Updates `actions/upload-pages-artifact` from 3.0.1 to 4.0.0 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@56afc60...7b1f4a7) Updates `actions/deploy-pages` from 4.0.5 to 5.0.0 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@d6db901...cd2ce8f) Updates `webfactory/ssh-agent` from 0.9.0 to 0.10.0 - [Release notes](https://github.com/webfactory/ssh-agent/releases) - [Changelog](https://github.com/webfactory/ssh-agent/blob/master/CHANGELOG.md) - [Commits](webfactory/ssh-agent@dc588b6...e838748) Updates `dtolnay/rust-toolchain` from 56f84321dbccf38fb67ce29ab63e4754056677e0 to 3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 - [Release notes](https://github.com/dtolnay/rust-toolchain/releases) - [Commits](dtolnay/rust-toolchain@56f8432...3c5f7ea) Updates `ossf/scorecard-action` from 2.4.0 to 2.4.3 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@62b2cac...4eaacf0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/cache dependency-version: 5.0.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: codecov/codecov-action dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: softprops/action-gh-release dependency-version: '2' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/github-script dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: peter-evans/repository-dispatch dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/configure-pages dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-pages-artifact dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/deploy-pages dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: webfactory/ssh-agent dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: dtolnay/rust-toolchain dependency-version: 3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 dependency-type: direct:production dependency-group: actions - dependency-name: ossf/scorecard-action dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent fc4d5c2 commit 6d7e066

16 files changed

Lines changed: 54 additions & 54 deletions

‎.github/workflows/ci.yml‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727

2828
steps:
2929
- name: Checkout code
30-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
30+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
3131

3232
- name: Setup Erlang/OTP
3333
uses: erlef/setup-beam@v1
@@ -36,7 +36,7 @@ jobs:
3636
rebar3-version: ${{ env.REBAR3_VERSION }}
3737

3838
- name: Cache build artifacts
39-
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4
39+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v4
4040
with:
4141
path: |
4242
_build
@@ -73,7 +73,7 @@ jobs:
7373

7474
steps:
7575
- name: Checkout code
76-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
76+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
7777

7878
- name: Setup Erlang/OTP
7979
uses: erlef/setup-beam@v1
@@ -82,7 +82,7 @@ jobs:
8282
rebar3-version: ${{ env.REBAR3_VERSION }}
8383

8484
- name: Download build artifacts
85-
uses: actions/download-artifact@v3
85+
uses: actions/download-artifact@v8
8686
with:
8787
name: build-artifacts
8888
path: _build/
@@ -108,7 +108,7 @@ jobs:
108108

109109
steps:
110110
- name: Checkout code
111-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
111+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
112112

113113
- name: Setup Erlang/OTP
114114
uses: erlef/setup-beam@v1
@@ -117,7 +117,7 @@ jobs:
117117
rebar3-version: ${{ env.REBAR3_VERSION }}
118118

119119
- name: Download build artifacts
120-
uses: actions/download-artifact@v3
120+
uses: actions/download-artifact@v8
121121
with:
122122
name: build-artifacts
123123
path: _build/
@@ -129,7 +129,7 @@ jobs:
129129
run: rebar3 cover --verbose
130130

131131
- name: Upload coverage to Codecov
132-
uses: codecov/codecov-action@v3
132+
uses: codecov/codecov-action@v6
133133
with:
134134
files: _build/test/cover/cobertura.xml
135135
fail_ci_if_error: false
@@ -145,7 +145,7 @@ jobs:
145145

146146
steps:
147147
- name: Checkout code
148-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
148+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
149149

150150
- name: Setup Erlang/OTP
151151
uses: erlef/setup-beam@v1
@@ -154,15 +154,15 @@ jobs:
154154
rebar3-version: ${{ env.REBAR3_VERSION }}
155155

156156
- name: Cache PLT
157-
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4
157+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v4
158158
with:
159159
path: _build/default/*_plt
160160
key: ${{ runner.os }}-plt-${{ hashFiles('rebar.config') }}
161161
restore-keys: |
162162
${{ runner.os }}-plt-
163163
164164
- name: Download build artifacts
165-
uses: actions/download-artifact@v3
165+
uses: actions/download-artifact@v8
166166
with:
167167
name: build-artifacts
168168
path: _build/
@@ -180,7 +180,7 @@ jobs:
180180

181181
steps:
182182
- name: Checkout code
183-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
183+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
184184

185185
- name: Check for hardcoded secrets
186186
run: |
@@ -211,7 +211,7 @@ jobs:
211211

212212
steps:
213213
- name: Checkout code
214-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
214+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
215215

216216
- name: Check required files
217217
run: |
@@ -272,7 +272,7 @@ jobs:
272272

273273
steps:
274274
- name: Checkout code
275-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
275+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
276276

277277
- name: Setup Erlang/OTP
278278
uses: erlef/setup-beam@v1
@@ -281,7 +281,7 @@ jobs:
281281
rebar3-version: ${{ env.REBAR3_VERSION }}
282282

283283
- name: Download build artifacts
284-
uses: actions/download-artifact@v3
284+
uses: actions/download-artifact@v8
285285
with:
286286
name: build-artifacts
287287
path: _build/
@@ -308,7 +308,7 @@ jobs:
308308

309309
steps:
310310
- name: Checkout code
311-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
311+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
312312

313313
- name: Setup Erlang/OTP
314314
uses: erlef/setup-beam@v1
@@ -322,7 +322,7 @@ jobs:
322322
rebar3 as prod tar
323323
324324
- name: Create GitHub Release
325-
uses: softprops/action-gh-release@v1
325+
uses: softprops/action-gh-release@v2
326326
with:
327327
files: _build/prod/rel/safe_brute_force/*.tar.gz
328328
generate_release_notes: true

‎.github/workflows/codeql.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ jobs:
5656
# your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
5757
steps:
5858
- name: Checkout repository
59-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
59+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
6060

6161
# Add any setup steps before running the `github/codeql-action/init` action.
6262
# This includes steps like installing compilers or runtimes (`actions/setup-node`

‎.github/workflows/guix-nix-policy.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ jobs:
55
check:
66
runs-on: ubuntu-latest
77
steps:
8-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
8+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
99
- name: Enforce Guix primary / Nix fallback
1010
run: |
1111
# Check for package manager files

‎.github/workflows/hypatia-scan.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020

2121
steps:
2222
- name: Checkout repository
23-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
23+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
2424
with:
2525
fetch-depth: 0 # Full history for better pattern analysis
2626

@@ -146,7 +146,7 @@ jobs:
146146
147147
- name: Comment on PR with findings
148148
if: github.event_name == 'pull_request' && steps.scan.outputs.findings_count > 0
149-
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
149+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v7
150150
with:
151151
script: |
152152
const fs = require('fs');

‎.github/workflows/instant-sync.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
runs-on: ubuntu-latest
1717
steps:
1818
- name: Trigger Propagation
19-
uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # v3
19+
uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4.0.1
2020
with:
2121
token: ${{ secrets.FARM_DISPATCH_TOKEN }}
2222
repository: hyperpolymath/.git-private-farm

‎.github/workflows/jekyll-gh-pages.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -28,16 +28,16 @@ jobs:
2828
runs-on: ubuntu-latest
2929
steps:
3030
- name: Checkout
31-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
31+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
3232
- name: Setup Pages
33-
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
33+
uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
3434
- name: Build with Jekyll
3535
uses: actions/jekyll-build-pages@44a6e6beabd48582f863aeeb6cb2151cc1716697 # v1
3636
with:
3737
source: ./
3838
destination: ./_site
3939
- name: Upload artifact
40-
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
40+
uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4.0.0
4141

4242
# Deployment job
4343
deploy:
@@ -49,4 +49,4 @@ jobs:
4949
steps:
5050
- name: Deploy to GitHub Pages
5151
id: deployment
52-
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
52+
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0

‎.github/workflows/mirror.yml‎

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -14,11 +14,11 @@ jobs:
1414
runs-on: ubuntu-latest
1515
if: vars.GITLAB_MIRROR_ENABLED == 'true'
1616
steps:
17-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
17+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
1818
with:
1919
fetch-depth: 0
2020

21-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
21+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
2222
with:
2323
ssh-private-key: ${{ secrets.GITLAB_SSH_KEY }}
2424

@@ -32,11 +32,11 @@ jobs:
3232
runs-on: ubuntu-latest
3333
if: vars.BITBUCKET_MIRROR_ENABLED == 'true'
3434
steps:
35-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
35+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
3636
with:
3737
fetch-depth: 0
3838

39-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
39+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
4040
with:
4141
ssh-private-key: ${{ secrets.BITBUCKET_SSH_KEY }}
4242

@@ -50,11 +50,11 @@ jobs:
5050
runs-on: ubuntu-latest
5151
if: vars.CODEBERG_MIRROR_ENABLED == 'true'
5252
steps:
53-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
53+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
5454
with:
5555
fetch-depth: 0
5656

57-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
57+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
5858
with:
5959
ssh-private-key: ${{ secrets.CODEBERG_SSH_KEY }}
6060

@@ -68,11 +68,11 @@ jobs:
6868
runs-on: ubuntu-latest
6969
if: vars.SOURCEHUT_MIRROR_ENABLED == 'true'
7070
steps:
71-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
71+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
7272
with:
7373
fetch-depth: 0
7474

75-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
75+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
7676
with:
7777
ssh-private-key: ${{ secrets.SOURCEHUT_SSH_KEY }}
7878

@@ -86,11 +86,11 @@ jobs:
8686
runs-on: ubuntu-latest
8787
if: vars.DISROOT_MIRROR_ENABLED == 'true'
8888
steps:
89-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
89+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
9090
with:
9191
fetch-depth: 0
9292

93-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
93+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
9494
with:
9595
ssh-private-key: ${{ secrets.DISROOT_SSH_KEY }}
9696

@@ -104,11 +104,11 @@ jobs:
104104
runs-on: ubuntu-latest
105105
if: vars.GITEA_MIRROR_ENABLED == 'true'
106106
steps:
107-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
107+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
108108
with:
109109
fetch-depth: 0
110110

111-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
111+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
112112
with:
113113
ssh-private-key: ${{ secrets.GITEA_SSH_KEY }}
114114

@@ -122,12 +122,12 @@ jobs:
122122
runs-on: ubuntu-latest
123123
if: vars.RADICLE_MIRROR_ENABLED == 'true'
124124
steps:
125-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
125+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
126126
with:
127127
fetch-depth: 0
128128

129129
- name: Setup Rust
130-
uses: dtolnay/rust-toolchain@56f84321dbccf38fb67ce29ab63e4754056677e0 # stable
130+
uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # stable
131131
with:
132132
toolchain: stable
133133

‎.github/workflows/quality.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ jobs:
66
lint:
77
runs-on: ubuntu-latest
88
steps:
9-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
9+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
1010

1111
- name: Check file permissions
1212
run: |
@@ -36,7 +36,7 @@ jobs:
3636
docs:
3737
runs-on: ubuntu-latest
3838
steps:
39-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
39+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
4040
- name: Check documentation
4141
run: |
4242
MISSING=""

‎.github/workflows/rsr-antipattern.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
antipattern-check:
1818
runs-on: ubuntu-latest
1919
steps:
20-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
20+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
2121

2222
- name: Check for TypeScript
2323
run: |

‎.github/workflows/scorecard-enforcer.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,12 @@ jobs:
1818
security-events: write
1919
id-token: write # For OIDC
2020
steps:
21-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
21+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
2222
with:
2323
persist-credentials: false
2424

2525
- name: Run Scorecard
26-
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
26+
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
2727
with:
2828
results_file: results.sarif
2929
results_format: sarif
@@ -53,7 +53,7 @@ jobs:
5353
check-critical:
5454
runs-on: ubuntu-latest
5555
steps:
56-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
56+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
5757

5858
- name: Check SECURITY.md exists
5959
run: |

0 commit comments

Comments
 (0)