From 8153e65b3bb059bd93d4bd168cf8cfb051230de6 Mon Sep 17 00:00:00 2001 From: filtered <176114999+webfiltered@users.noreply.github.com> Date: Sat, 8 Mar 2025 15:35:40 +1100 Subject: [PATCH] [CI] Pin third party action to SHA (#721) Pins third party GitHub action to specific SHA. This will need to be updated, but removes the possibility of any unexpected surprises (new bugs / security concerns). --- .github/workflows/release-version.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release-version.yml b/.github/workflows/release-version.yml index 2553f9b54..c35fd10f7 100644 --- a/.github/workflows/release-version.yml +++ b/.github/workflows/release-version.yml @@ -42,7 +42,7 @@ jobs: echo "capitalised=$CAPITALISED_TYPE" >> $GITHUB_OUTPUT - name: Create Pull Request - uses: peter-evans/create-pull-request@v7 + uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e with: token: ${{ secrets.PR_GH_TOKEN }} commit-message: "[Release] Increment version to ${{ steps.bump-version.outputs.NEW_VERSION }}"