From fa382026646b9e33af302d60e406acd4d0b51104 Mon Sep 17 00:00:00 2001 From: William Chu Date: Fri, 12 Dec 2025 14:37:30 +1100 Subject: [PATCH] security(plt-1209): pin all github actions to a fixed sha via ratchet --- .github/workflows/ci.yaml | 4 ++-- .github/workflows/publish.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index c10db8b..2464824 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -13,7 +13,7 @@ permissions: issues: write jobs: CI: - uses: uptick/actions/.github/workflows/ci.yaml@main + uses: uptick/actions/.github/workflows/ci.yaml@main # ratchet:exclude secrets: inherit with: - command: make ci \ No newline at end of file + command: make ci diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index b42e8f2..0084595 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -12,10 +12,10 @@ permissions: issues: write jobs: Publish: - uses: uptick/actions/.github/workflows/ci.yaml@main + uses: uptick/actions/.github/workflows/ci.yaml@main # ratchet:exclude secrets: inherit with: uv: true python: true s3pypi-publish: true - command: make build \ No newline at end of file + command: make build