From 01e5a1933e1e8cc4baf0a68c6f714117311e22bd Mon Sep 17 00:00:00 2001 From: Ogulcan Celik Date: Thu, 11 Jun 2026 03:17:19 +0300 Subject: ci: pin github actions to shas --- .github/workflows/approve-contributor.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to '.github/workflows/approve-contributor.yml') diff --git a/.github/workflows/approve-contributor.yml b/.github/workflows/approve-contributor.yml index 069ef898..2999f8ce 100644 --- a/.github/workflows/approve-contributor.yml +++ b/.github/workflows/approve-contributor.yml @@ -12,14 +12,14 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: ref: ${{ github.event.repository.default_branch }} persist-credentials: false - name: Add contributor to approved list id: update - uses: actions/github-script@v9 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 with: github-token: ${{ secrets.KANGAL_GITHUB_TOKEN }} script: | @@ -96,7 +96,7 @@ jobs: - name: Comment on issue if: steps.update.outputs.status == 'added' - uses: actions/github-script@v9 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 with: github-token: ${{ secrets.KANGAL_GITHUB_TOKEN }} script: | -- cgit v1.2.3