From c8ab6890eee0845da303412d5e8cc708714f34d3 Mon Sep 17 00:00:00 2001 From: jon8787 <112368577+jon8787@users.noreply.github.com> Date: Fri, 10 Apr 2026 17:52:46 +1000 Subject: [PATCH] Pin external GitHub Actions to SHA hashes Co-Authored-By: Claude Opus 4.6 --- .github/workflows/build-and-publish.yaml | 4 ++-- .github/workflows/build-and-test.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/build-and-publish.yaml b/.github/workflows/build-and-publish.yaml index f7faeb3..bedad84 100644 --- a/.github/workflows/build-and-publish.yaml +++ b/.github/workflows/build-and-publish.yaml @@ -26,10 +26,10 @@ jobs: python-version: ["3.10","3.11","3.12","3.13"] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v4 + uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4 with: python-version: ${{ matrix.python-version }} diff --git a/.github/workflows/build-and-test.yaml b/.github/workflows/build-and-test.yaml index 1033265..4663ed0 100644 --- a/.github/workflows/build-and-test.yaml +++ b/.github/workflows/build-and-test.yaml @@ -15,10 +15,10 @@ jobs: python-version: ["3.10","3.11","3.12","3.13"] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v4 + uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4 with: python-version: ${{ matrix.python-version }}