From 0a22191c8694aef4b4cc0f6229340d54c1283aa7 Mon Sep 17 00:00:00 2001 From: filtered <176114999+webfiltered@users.noreply.github.com> Date: Wed, 4 Jun 2025 04:18:08 -0700 Subject: [PATCH] [chore] Pin third-party GitHub Actions to commit SHAs (#1074) --- .github/workflows/dev-release.yml | 2 +- .github/workflows/github-release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dev-release.yml b/.github/workflows/dev-release.yml index 4a97ddfb6..475bec460 100644 --- a/.github/workflows/dev-release.yml +++ b/.github/workflows/dev-release.yml @@ -34,7 +34,7 @@ jobs: - name: Create release id: create_release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: diff --git a/.github/workflows/github-release.yml b/.github/workflows/github-release.yml index 1ebc7cb27..22c1bcb7e 100644 --- a/.github/workflows/github-release.yml +++ b/.github/workflows/github-release.yml @@ -32,7 +32,7 @@ jobs: - name: Create release id: create_release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: