fix: pin actions/checkout to the v4.4.0 commit SHA

This commit is contained in:
James Johnson 2026-10-18 22:13:10 +01:00
parent 5949c40942
commit e84f8491ec
No known key found for this signature in database
GPG key ID: 4DD5E522F8940E76
4 changed files with 4 additions and 4 deletions

View file

@ -12,7 +12,7 @@ jobs:
osv-scanner: osv-scanner:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
- name: osv-scanner - name: osv-scanner
run: | run: |
osv-scanner --version | head -1 osv-scanner --version | head -1

View file

@ -43,7 +43,7 @@ jobs:
lint: lint:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
- name: shellcheck - name: shellcheck
if: ${{ !cancelled() && inputs.shellcheck }} if: ${{ !cancelled() && inputs.shellcheck }}

View file

@ -16,7 +16,7 @@ jobs:
semgrep: semgrep:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
- name: semgrep - name: semgrep
env: env:
CONFIGS: ${{ inputs.config }} CONFIGS: ${{ inputs.config }}

View file

@ -21,7 +21,7 @@ jobs:
gitleaks: gitleaks:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
with: with:
fetch-depth: 0 fetch-depth: 0
- name: gitleaks - name: gitleaks