From 99bc900f47d21855a114e0ef50b5fc126ae71d29 Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 18 Jun 2026 12:40:14 +0000 Subject: [PATCH] ci(provable): SHA-pin mlugg/setup-zig (v1.2.2) Pin the last unpinned action in provable.yml to its commit SHA (53fc45b17fe98b52f92ee5ea08ff48a85a3e7eb7 = v1.2.2), clearing the remaining advisory Hypatia `unpinned_action` finding. SHA resolved via `git ls-remote https://github.com/mlugg/setup-zig`. Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01Mbq6yKF9RhFai6EQ7WqKhQ --- .github/workflows/provable.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/provable.yml b/.github/workflows/provable.yml index 1e203b4..f34d8f3 100644 --- a/.github/workflows/provable.yml +++ b/.github/workflows/provable.yml @@ -46,7 +46,7 @@ jobs: timeout-minutes: 15 steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - - uses: mlugg/setup-zig@v1 # SHA-pin pending (advisory Hypatia medium) + - uses: mlugg/setup-zig@53fc45b17fe98b52f92ee5ea08ff48a85a3e7eb7 # v1.2.2 with: version: 0.14.0 - name: zig build + test