From f6afa2b95f15feb31bf6621ca83ee996b6bb1467 Mon Sep 17 00:00:00 2001 From: Gabriela Gutierrez Date: Wed, 7 Jun 2023 16:58:50 -0300 Subject: [PATCH] Ref actions by commit SHA in release.yml It's important to make sure the SHA's are from the original repositories and not forks. For reference: https://github.com/actions/checkout/releases/tag/v3.5.2 https://github.com/actions/checkout/commit/8e5e7e5ab8b370d6c329ec480221332ada57f0ab Signed-off-by: Gabriela Gutierrez --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index fccd490..7bdcaaa 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -10,6 +10,6 @@ jobs: release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 - name: Release run: make release