From fe74602a475fee4de203470c96690dd4238c87d1 Mon Sep 17 00:00:00 2001 From: Masahiro Nagano Date: Mon, 22 Sep 2025 23:14:56 +0900 Subject: [PATCH] pin actions commithash --- .github/workflows/tagpr.yml | 8 ++++---- .github/workflows/test.yml | 6 +++--- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/tagpr.yml b/.github/workflows/tagpr.yml index 8e63a9e..0be7d53 100644 --- a/.github/workflows/tagpr.yml +++ b/.github/workflows/tagpr.yml @@ -11,21 +11,21 @@ jobs: pull-requests: write issues: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - - uses: Songmu/tagpr@v1 + - uses: Songmu/tagpr@9c294c8b7b1815a5f3b7c61d6ee6aa50ac25b030 # v1 id: tagpr env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Setup Go - uses: actions/setup-go@v4 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4 with: go-version-file: go.mod if: ${{ steps.tagpr.outputs.tag != ''}} - name: Run GoReleaser - uses: goreleaser/goreleaser-action@v5 + uses: goreleaser/goreleaser-action@5742e2a039330cbb23ebf35f046f814d4c6ff811 # v5 with: version: latest args: release --clean diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index cbfe0eb..0f1202c 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -9,8 +9,8 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@v4 - - uses: actions/setup-go@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4 with: go-version-file: go.mod @@ -19,7 +19,7 @@ jobs: make check - name: Snapshot GoReleaser - uses: goreleaser/goreleaser-action@v5 + uses: goreleaser/goreleaser-action@5742e2a039330cbb23ebf35f046f814d4c6ff811 # v5 with: version: latest args: build --snapshot \ No newline at end of file