From: Ernesto Puerta <epuertat@redhat.com>
Date: Thu, 2 Oct 2025 17:49:19 +0000 (+0200)
Subject: .github: pin GH Actions to SHA-1 commit
X-Git-Tag: v19.2.4~39^2
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=dacc5fac1dca33f67acbf4d885b9fa3a99f00175;p=ceph.git

.github: pin GH Actions to SHA-1 commit

Fixes: https://tracker.ceph.com/issues/73336
Signed-off-by: Ernesto Puerta <epuertat@redhat.com>
---

diff --git a/.github/workflows/create-backport-trackers.yml b/.github/workflows/create-backport-trackers.yml
index fe05d09b0ec..65ff2d06dcd 100644
--- a/.github/workflows/create-backport-trackers.yml
+++ b/.github/workflows/create-backport-trackers.yml
@@ -39,7 +39,7 @@ jobs:
       - uses: Bhacaz/checkout-files@e3e34e7daef91a5f237485bb88a260aee4be29dd
         with:
           files: src/script/backport-create-issue src/script/requirements.backport-create-issue.txt
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
         with:
           python-version: '>=3.6 <3.12'
           cache: 'pip'
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 510a6bebd4e..473adae94ff 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -9,7 +9,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9
         with:
           # PAT for GitHub API authentication
           repo-token: "${{ secrets.GITHUB_TOKEN }}"