ci: pin GitHub Actions to commit SHAs

This commit is contained in:
Amir Alavi
2026-05-15 22:21:04 -04:00
parent c00d88f9ed
commit b5a7c076f3
3 changed files with 10 additions and 10 deletions

View File

@@ -19,7 +19,7 @@ jobs:
security-events: write
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
with:
fetch-depth: 0
@@ -38,6 +38,6 @@ jobs:
output: 'trivy-results.sarif'
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v4
uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4
with:
sarif_file: 'trivy-results.sarif'