Skip to content

Commit 11f3125

Browse files
step-security-botpylapp
authored andcommitted
ci: harden GitHub Actions snapshot workflow by using SHA hash for dependency (#122)
Thanks to https://app.stepsecurity.io/secure-repo Reviewed-by: Pierre-Yves Lapersonne <[email protected]> Signed-off-by: StepSecurity Bot <[email protected]> Signed-off-by: Pierre-Yves Lapersonne <[email protected]>
1 parent 03050eb commit 11f3125

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/snapshot.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
snapshot:
3333
runs-on: ubuntu-latest
3434
steps:
35-
- uses: actions/checkout@v4
35+
- uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
3636
with:
3737
ref: develop
3838
token: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)