Skip to content

Commit cb7bc9f

Browse files
committed
Keep dependabot action pins visible
1 parent 1f5857f commit cb7bc9f

2 files changed

Lines changed: 21 additions & 46 deletions

File tree

.github/actions/setup-sfw/action.yml

Lines changed: 0 additions & 40 deletions
This file was deleted.

.github/workflows/dependabot-review.yml

Lines changed: 21 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -94,9 +94,16 @@ jobs:
9494
fetch-depth: 1
9595
persist-credentials: false
9696

97-
- uses: ./.github/actions/setup-sfw
97+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
9898
with:
99-
uv: "true"
99+
python-version: "3.12"
100+
101+
- uses: socketdev/action@ba6de6cc0565af1f42295590380973573297e31f # v1.3.2
102+
with:
103+
mode: firewall-free
104+
105+
- name: Install uv
106+
run: python -m pip install --upgrade pip uv
100107

101108
- name: Sync project through Socket Firewall
102109
# `sfw uv sync` is the intended way to route uv through Socket Firewall
@@ -131,9 +138,13 @@ jobs:
131138
fetch-depth: 1
132139
persist-credentials: false
133140

134-
- uses: ./.github/actions/setup-sfw
141+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
135142
with:
136-
node: "true"
143+
node-version: "20"
144+
145+
- uses: socketdev/action@ba6de6cc0565af1f42295590380973573297e31f # v1.3.2
146+
with:
147+
mode: firewall-free
137148

138149
- name: Install fixture through Socket Firewall
139150
working-directory: tests/e2e/fixtures/simple-npm
@@ -150,9 +161,13 @@ jobs:
150161
fetch-depth: 1
151162
persist-credentials: false
152163

153-
- uses: ./.github/actions/setup-sfw
164+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
165+
with:
166+
python-version: "3.12"
167+
168+
- uses: socketdev/action@ba6de6cc0565af1f42295590380973573297e31f # v1.3.2
154169
with:
155-
python: "true"
170+
mode: firewall-free
156171

157172
- name: Install fixture through Socket Firewall
158173
working-directory: tests/e2e/fixtures/simple-pypi

0 commit comments

Comments
 (0)