From 4d8930ca22a4062a7f6dfe0bdf46eb7eeac5a90c Mon Sep 17 00:00:00 2001 From: Will Yuponce Date: Mon, 22 Jun 2026 08:13:38 -0400 Subject: [PATCH] ci: pin actions/checkout to full commit SHA in back-merge workflow The back-merge workflow (#548) used actions/checkout@v4, which fails the databrickslabs/ontos policy requiring all actions be pinned to a full-length commit SHA. Pin to the same SHA the other workflows in this repo already use (df4cb1c069e1874edd31b4311f1884172cec0e10 # v6). --- .github/workflows/backmerge-main-to-development.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/backmerge-main-to-development.yml b/.github/workflows/backmerge-main-to-development.yml index a3f7d68c..16b60cef 100644 --- a/.github/workflows/backmerge-main-to-development.yml +++ b/.github/workflows/backmerge-main-to-development.yml @@ -24,7 +24,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: fetch-depth: 0