From bcf027b6709be0bf680c17029ee42d8f1b15e3b3 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Sat, 19 Sep 2026 22:55:59 +0000 Subject: [PATCH] fix(ci): pin third-party actions to full commit SHAs MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The account's Actions policy requires a full-length SHA ref. A tag or branch ref is refused at startup — `startup_failure`, no jobs, "this workflow graph cannot be shown" — so these workflows could not run at all. This resolves each ref to the commit it currently points at and records the ref in a trailing comment, e.g. `actions/checkout@ # v4`. `dtolnay/rust-toolchain` takes its toolchain from the ref itself, so those steps also gained an explicit `with: toolchain:` input; without it, a SHA ref would silently lose the channel. No behaviour is intended to change beyond the pins. --- disinfo-nesy-detector/.github/workflows/rust.yml | 4 +++- disinfo-nesy-detector/.github/workflows/stress-test.yml | 4 +++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/disinfo-nesy-detector/.github/workflows/rust.yml b/disinfo-nesy-detector/.github/workflows/rust.yml index 407c985..aea8c7b 100644 --- a/disinfo-nesy-detector/.github/workflows/rust.yml +++ b/disinfo-nesy-detector/.github/workflows/rust.yml @@ -22,7 +22,9 @@ jobs: - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: Install Rust toolchain - uses: dtolnay/rust-toolchain@stable + uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable + with: + toolchain: stable with: components: rustfmt, clippy diff --git a/disinfo-nesy-detector/.github/workflows/stress-test.yml b/disinfo-nesy-detector/.github/workflows/stress-test.yml index fe7ce8f..3812387 100644 --- a/disinfo-nesy-detector/.github/workflows/stress-test.yml +++ b/disinfo-nesy-detector/.github/workflows/stress-test.yml @@ -13,7 +13,9 @@ jobs: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Install Rust toolchain - uses: dtolnay/rust-toolchain@stable + uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable + with: + toolchain: stable - name: Install stress testing tools run: |