From 4abece5273975ec3af1d16743ff3bcabb3d21d80 Mon Sep 17 00:00:00 2001 From: Rudransh Shrivastava Date: Fri, 5 Jun 2026 15:52:24 +0530 Subject: [PATCH] .github: pin github actions to full-length commit SHA Signed-off-by: Rudransh Shrivastava --- .github/workflows/build.yml | 2 +- .github/workflows/check-licenses.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index fe400bca4..3dc98f44a 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -37,7 +37,7 @@ jobs: - name: Setup Go id: go - uses: actions/setup-go@v6 + uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 with: go-version: stable cache: false diff --git a/.github/workflows/check-licenses.yml b/.github/workflows/check-licenses.yml index d2fff6d1d..57524d090 100644 --- a/.github/workflows/check-licenses.yml +++ b/.github/workflows/check-licenses.yml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Code checkout - uses: actions/checkout@master + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup Go id: go