Merge pull request #817 from nozaq/pin-actions

workflow: pin action versions and migrate archived actions
licensee · Mar 4, 2025 · bfb7d96 · bfb7d96
2 parents 6ea9528 + 184ed42
commit bfb7d96
Show file tree

Hide file tree

Showing 3 changed files with 66 additions and 74 deletions.
diff --git a/.github/workflows/licensed.yml b/.github/workflows/licensed.yml
@@ -14,9 +14,9 @@ jobs:
       contents: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: ruby/setup-ruby@32110d4e311bd8996b2a82bf2a43b714ccc91777
+      - uses: ruby/setup-ruby@32110d4e311bd8996b2a82bf2a43b714ccc91777 # v1.221.0
         with:
           bundler-cache: true
 
@@ -27,7 +27,7 @@ jobs:
           chmod 0600 $HOME/.gem/credentials
           gem build *.gemspec
 
-      - uses: github/licensed-ci@v1
+      - uses: licensee/licensed-ci@98eef7c23bcf8211e108781a9594e969da913e89 # v1.11.2
         with:
           # override the command to use licensed built from this repo
           command: bundle exec licensed

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -13,9 +13,9 @@ jobs:
       packages: write
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-    - uses: ruby/setup-ruby@32110d4e311bd8996b2a82bf2a43b714ccc91777
+    - uses: ruby/setup-ruby@32110d4e311bd8996b2a82bf2a43b714ccc91777 # v1.221.0
 
     - name: Build Gem
       run: |