From 89918a915441f6e39f08a9173f827f5c9ba02bd6 Mon Sep 17 00:00:00 2001 From: Paul Rutledge Date: Tue, 7 Apr 2026 09:46:24 -0500 Subject: [PATCH 1/2] Pin GitHub Actions to specific SHA hashes This pins all GitHub Action references to specific commit SHAs for improved supply chain security, while preserving the original version reference in a comment. Co-Authored-By: Claude Opus 4.6 --- .github/workflows/demo.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/demo.yml b/.github/workflows/demo.yml index 42a1e26..bc9549b 100644 --- a/.github/workflows/demo.yml +++ b/.github/workflows/demo.yml @@ -8,7 +8,7 @@ jobs: os: [ ubuntu-latest, macOS-latest, windows-latest ] runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Setup key uses: ./ with: @@ -28,7 +28,7 @@ jobs: container: image: ubuntu:latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - run: apt update && apt install -y openssh-client git - name: Setup key uses: ./ From a20c46d09f721eca4d5ef1647423e4e2976a516c Mon Sep 17 00:00:00 2001 From: donggun Date: Tue, 7 Apr 2026 10:53:42 -0500 Subject: [PATCH 2/2] Add commit URLs next to version comments for pinned actions Co-Authored-By: Claude Opus 4.6 --- .github/workflows/demo.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/demo.yml b/.github/workflows/demo.yml index bc9549b..0a9edd7 100644 --- a/.github/workflows/demo.yml +++ b/.github/workflows/demo.yml @@ -8,7 +8,7 @@ jobs: os: [ ubuntu-latest, macOS-latest, windows-latest ] runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 https://github.com/actions/checkout/commit/34e114876b0b11c390a56381ad16ebd13914f8d5 - name: Setup key uses: ./ with: @@ -28,7 +28,7 @@ jobs: container: image: ubuntu:latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 https://github.com/actions/checkout/commit/34e114876b0b11c390a56381ad16ebd13914f8d5 - run: apt update && apt install -y openssh-client git - name: Setup key uses: ./