From ab185f8fcdfde239353f205afd04c609fa369a69 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Torbj=C3=B8rn=20B=C3=B8e=20Lauvvik?= Date: Tue, 10 Nov 2026 18:23:28 +0100 Subject: [PATCH] ci: pin GitHub Actions and reusable workflows to commit SHAs Pin the OriginAS/origin-actions reusable workflow refs to the commit main points at today, with '# main' as a trailing comment. Same workflow code as before; Dependabot's github-actions updates bump the SHA. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/codeql.yml | 2 +- .github/workflows/dependabot-assign.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 877b365..b5c8ac1 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -25,5 +25,5 @@ jobs: actions: read contents: read security-events: write - uses: OriginAS/origin-actions/.github/workflows/codeql.yml@main + uses: OriginAS/origin-actions/.github/workflows/codeql.yml@f72ac0ab464a0462cef5cd7eca7f562206c26edf # main secrets: inherit diff --git a/.github/workflows/dependabot-assign.yml b/.github/workflows/dependabot-assign.yml index 91fd636..af9009e 100644 --- a/.github/workflows/dependabot-assign.yml +++ b/.github/workflows/dependabot-assign.yml @@ -18,7 +18,7 @@ jobs: contents: read # read the commit history issues: write # add assignees (PRs are issues in the API) pull-requests: write # request reviewers - uses: OriginAS/origin-actions/.github/workflows/dependabot-assign.yml@main + uses: OriginAS/origin-actions/.github/workflows/dependabot-assign.yml@f72ac0ab464a0462cef5cd7eca7f562206c26edf # main with: count: 2 days: 90