prehistoric-systems/DNSecure
1
0
Fork 0
mirror of https://github.com/kkebo/DNSecure.git synced 2026-03-11 08:54:36 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

ci: pin GitHub Actions dependencies to commit SHA

Browse source 
This is a defense against supply chain attacks. Moreover, GitHub
[recommends SHA
pinning](https://github.blog/changelog/2025-08-15-github-actions-policy-now-supports-blocking-and-sha-pinning-actions/) these days. Even with this change, dependabot should continue to function.
This commit is contained in:
Kenta Kubo 2025-10-01 00:59:08 +09:00
parent 92090b4fcd
commit f587bdf722
No known key found for this signature in database
GPG key ID: 3D79E20285C94BE8
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
.github/workflows/ci.yml vendored
View file

@ -9,11 +9,11 @@ jobs:
runs-on: ubuntu-24.04-arm
container: swift:6.2
steps:
- uses: actions/checkout@v5
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
- run: swift format lint -rsp .
yamllint:
runs-on: ubuntu-24.04-arm
steps:
- uses: actions/checkout@v5
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
- run: yamllint --version
- run: yamllint --strict --config-file .yamllint.yml .