From f48f0982a37f835d4909d3cd904956ae2948e891 Mon Sep 17 00:00:00 2001 From: Dan Moseley Date: Sat, 15 Mar 2025 16:32:17 -0600 Subject: [PATCH] pin actions --- .github/workflows/backport.yml | 2 +- .github/workflows/inter-branch-merge-flow.yml | 2 +- .github/workflows/locker.yml | 2 +- .github/workflows/update-sdk.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml index c9cc8ac2184..42f54ef3c44 100644 --- a/.github/workflows/backport.yml +++ b/.github/workflows/backport.yml @@ -15,7 +15,7 @@ permissions: jobs: backport: if: ${{ contains(github.event.comment.body, '/backport to') || github.event_name == 'schedule' }} - uses: dotnet/arcade/.github/workflows/backport-base.yml@main + uses: dotnet/arcade/.github/workflows/backport-base.yml@1912d9f4fc410d421a01b5a09131aae234b603fa # main with: pr_description_template: | Backport of #%source_pr_number% to %target_branch% diff --git a/.github/workflows/inter-branch-merge-flow.yml b/.github/workflows/inter-branch-merge-flow.yml index 2e4d57db414..856b592a85a 100644 --- a/.github/workflows/inter-branch-merge-flow.yml +++ b/.github/workflows/inter-branch-merge-flow.yml @@ -11,4 +11,4 @@ permissions: jobs: Merge: - uses: dotnet/arcade/.github/workflows/inter-branch-merge-base.yml@main \ No newline at end of file + uses: dotnet/arcade/.github/workflows/inter-branch-merge-base.yml@1912d9f4fc410d421a01b5a09131aae234b603fa # main \ No newline at end of file diff --git a/.github/workflows/locker.yml b/.github/workflows/locker.yml index 3cf63182334..405444a337d 100644 --- a/.github/workflows/locker.yml +++ b/.github/workflows/locker.yml @@ -23,7 +23,7 @@ jobs: if: ${{ github.repository_owner == 'dotnet' }} steps: - name: Checkout Actions - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: repository: "microsoft/vscode-github-triage-actions" path: ./actions diff --git a/.github/workflows/update-sdk.yml b/.github/workflows/update-sdk.yml index f46c60dee35..2490d89e871 100644 --- a/.github/workflows/update-sdk.yml +++ b/.github/workflows/update-sdk.yml @@ -19,7 +19,7 @@ jobs: name: Update .NET SDK runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: ref: dev - uses: martincostello/update-dotnet-sdk@76e2c0df2303d4f6a404228105ebb7d60ace0556 # v3.4.0