From 100c9ce7b3abaf3642fa5d361905ff4ac2f66d69 Mon Sep 17 00:00:00 2001 From: Fred Bricon Date: Fri, 17 Feb 2023 10:25:00 +0100 Subject: [PATCH] Pin 3rd-party actions to SHA1 in .github/workflows/ci.yml --- .github/workflows/ci.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index a8efbec..a616f0a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -15,7 +15,7 @@ jobs: uses: actions/checkout@v2 - name: Convert AsciiDoc id: documents - uses: Analog-inc/asciidoctor-action@master + uses: Analog-inc/asciidoctor-action@f6305152cb5089da83f50d4d80e26f63d264ae34 #master with: shellcommand: "./.github/workflows/asciidoc.sh" - name: Save AsciiDoc @@ -24,7 +24,7 @@ jobs: name: Docs path: ./output/ - name: Push to another repository - uses: cpina/github-action-push-to-another-repository@main + uses: cpina/github-action-push-to-another-repository@9e487f29582587eeb4837c0552c886bb0644b6b9 #main env: API_TOKEN_GITHUB: ${{ secrets.API_TOKEN_GITHUB }} with: