From e84f8491ecc25362520fb41a13e5fc1e72e3a42a Mon Sep 17 00:00:00 2001 From: James Johnson Date: Sun, 18 Oct 2026 22:13:10 +0100 Subject: [PATCH] fix: pin actions/checkout to the v4.4.0 commit SHA --- .forgejo/workflows/deps.yml | 2 +- .forgejo/workflows/lint.yml | 2 +- .forgejo/workflows/sast.yml | 2 +- .forgejo/workflows/secrets.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.forgejo/workflows/deps.yml b/.forgejo/workflows/deps.yml index f68d94d..b9bbd36 100644 --- a/.forgejo/workflows/deps.yml +++ b/.forgejo/workflows/deps.yml @@ -12,7 +12,7 @@ jobs: osv-scanner: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: osv-scanner run: | osv-scanner --version | head -1 diff --git a/.forgejo/workflows/lint.yml b/.forgejo/workflows/lint.yml index bd370a2..bb9ca9d 100644 --- a/.forgejo/workflows/lint.yml +++ b/.forgejo/workflows/lint.yml @@ -43,7 +43,7 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: shellcheck if: ${{ !cancelled() && inputs.shellcheck }} diff --git a/.forgejo/workflows/sast.yml b/.forgejo/workflows/sast.yml index d3e4e47..5c00874 100644 --- a/.forgejo/workflows/sast.yml +++ b/.forgejo/workflows/sast.yml @@ -16,7 +16,7 @@ jobs: semgrep: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: semgrep env: CONFIGS: ${{ inputs.config }} diff --git a/.forgejo/workflows/secrets.yml b/.forgejo/workflows/secrets.yml index bf4fd84..1deade9 100644 --- a/.forgejo/workflows/secrets.yml +++ b/.forgejo/workflows/secrets.yml @@ -21,7 +21,7 @@ jobs: gitleaks: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: fetch-depth: 0 - name: gitleaks