Pin GitHub Actions with hash instead of tag

Co-authored-by: Liu, An-Chi <[email protected]>
seladb · Aug 6, 2024 · b640b4f · b640b4f
1 parent 1f28917
commit b640b4f
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
@@ -574,10 +574,10 @@ jobs:
       matrix:
         version: ["14.0", "13.2"]
     steps:
-    - uses: actions/[email protected]
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
     - name: Test in FreeBSD
       id: test
-      uses: vmactions/freebsd-vm@v1
+      uses: vmactions/freebsd-vm@12c207ac1ba13827f25726fe93f9c2e6f685f0f3 # v1.0.8
       with:
         release: ${{ matrix.version }}
         usesh: true

diff --git a/.github/workflows/doxygen.yml b/.github/workflows/doxygen.yml
@@ -37,7 +37,7 @@ jobs:
 
       - name: Upload documentation
         if: github.ref == 'refs/heads/master'
-        uses: cpina/github-action-push-to-another-repository@main
+        uses: cpina/github-action-push-to-another-repository@07c4d7b3def0a8ebe788a8f2c843a4e1de4f6900 # main
         env:
           SSH_DEPLOY_KEY: ${{ secrets.SSH_DEPLOY_KEY }}
         with: