From e369ca2cacd2ffaae40e8b404ea1c52fcc0ab6ff Mon Sep 17 00:00:00 2001 From: Patrick Kalita Date: Thu, 21 May 2026 11:47:41 -0700 Subject: [PATCH] Upgrade and pin third-party actions using commit hashes --- .github/workflows/check-pull-request.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/check-pull-request.yaml b/.github/workflows/check-pull-request.yaml index f13c440..000f7ad 100644 --- a/.github/workflows/check-pull-request.yaml +++ b/.github/workflows/check-pull-request.yaml @@ -20,10 +20,10 @@ jobs: steps: # Checks-out your repository under $GITHUB_WORKSPACE - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: python-version: 3.10.15 @@ -32,7 +32,7 @@ jobs: run: sudo apt-get install pandoc - name: Run image - uses: abatilo/actions-poetry@v2.0.0 + uses: abatilo/actions-poetry@3765cf608f2d4a72178a9fc5b918668e542b89b1 # v4.0.0 with: poetry-version: 1.8.0