Skip to content

Commit f7c1b76

Browse files
committed
Pin GitHub Actions to commit SHAs
Match the pinning pattern used in shared.yml for supply chain security.
1 parent 12c7936 commit f7c1b76

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

.github/workflows/conformance.yml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,12 @@ jobs:
1818
runs-on: ubuntu-latest
1919
continue-on-error: true
2020
steps:
21-
- uses: actions/checkout@v4
22-
- uses: astral-sh/setup-uv@v7
21+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
22+
- uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
2323
with:
2424
enable-cache: true
2525
version: 0.9.5
26-
- uses: actions/setup-node@v4
26+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
2727
with:
2828
node-version: 24
2929
- run: uv sync --frozen --all-extras --package mcp-everything-server
@@ -33,12 +33,12 @@ jobs:
3333
runs-on: ubuntu-latest
3434
continue-on-error: true
3535
steps:
36-
- uses: actions/checkout@v4
37-
- uses: astral-sh/setup-uv@v7
36+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
37+
- uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
3838
with:
3939
enable-cache: true
4040
version: 0.9.5
41-
- uses: actions/setup-node@v4
41+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
4242
with:
4343
node-version: 24
4444
- run: uv sync --frozen --all-extras --package mcp

0 commit comments

Comments
 (0)