From e9db51c398aca477873fa33cd24f90eccef7b468 Mon Sep 17 00:00:00 2001 From: irfanuddinahmad Date: Tue, 19 May 2026 09:48:26 +0500 Subject: [PATCH] chore: pin GitHub Actions workflows to full commit SHAs --- .github/workflows/ci.yml | 6 +++--- .github/workflows/pypi-publish.yml | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4ecf818..2f3f942 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,14 +17,14 @@ jobs: toxenv: [celery54-django52] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: setup python - uses: actions/setup-python@v6 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: python-version: ${{ matrix.python-version }} - name: Start MongoDB - uses: supercharge/mongodb-github-action@1.12.1 + uses: supercharge/mongodb-github-action@315db7fe45ac2880b7758f1933e6e5d59afd5e94 # 1.12.1 with: mongodb-version: 4.0 diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml index 4906379..65f01ee 100644 --- a/.github/workflows/pypi-publish.yml +++ b/.github/workflows/pypi-publish.yml @@ -11,9 +11,9 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: setup python - uses: actions/setup-python@v6 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: python-version: 3.11