Barazo lexicon schemas and TypeScript types
barazo.forum
Merge pull request #14 from barazo-forum/fix/pin-actions
fix(ci): pin GitHub Actions to commit SHAs
authored by
Guido X Jansen
and committed by
GitHub
e022f62e
abf0b976
+7
-7
+3
-3
.github/workflows/ci.yml
+3
-3
.github/workflows/ci.yml
···
15
15
runs-on: ubuntu-latest
16
16
17
17
steps:
18
-
- uses: actions/checkout@v4
18
+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
19
19
20
-
- uses: pnpm/action-setup@v4
20
+
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4
21
21
22
-
- uses: actions/setup-node@v4
22
+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
23
23
with:
24
24
node-version: 24
25
25
+1
-1
.github/workflows/cla.yml
+1
-1
.github/workflows/cla.yml
···
17
17
steps:
18
18
- name: "CLA Assistant"
19
19
if: (github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA' || github.event_name == 'pull_request_target')
20
-
uses: contributor-assistant/github-action@v2.5.2
20
+
uses: contributor-assistant/github-action@fdca7a016082d9130c3cd91a236ddf956ec35f1d # v2.5.2
21
21
env:
22
22
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
23
23
PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_BOT_TOKEN }}
+3
-3
.github/workflows/publish.yml
+3
-3
.github/workflows/publish.yml
···
13
13
publish:
14
14
runs-on: ubuntu-latest
15
15
steps:
16
-
- uses: actions/checkout@v4
16
+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
17
17
18
-
- uses: pnpm/action-setup@v4
18
+
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4
19
19
20
-
- uses: actions/setup-node@v4
20
+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
21
21
with:
22
22
node-version: "24"
23
23
registry-url: "https://npm.pkg.github.com"