From dacc5fac1dca33f67acbf4d885b9fa3a99f00175 Mon Sep 17 00:00:00 2001 From: Ernesto Puerta Date: Thu, 2 Oct 2025 19:49:19 +0200 Subject: [PATCH] .github: pin GH Actions to SHA-1 commit Fixes: https://tracker.ceph.com/issues/73336 Signed-off-by: Ernesto Puerta --- .github/workflows/create-backport-trackers.yml | 2 +- .github/workflows/stale.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/create-backport-trackers.yml b/.github/workflows/create-backport-trackers.yml index fe05d09b0ec1..65ff2d06dcdc 100644 --- a/.github/workflows/create-backport-trackers.yml +++ b/.github/workflows/create-backport-trackers.yml @@ -39,7 +39,7 @@ jobs: - uses: Bhacaz/checkout-files@e3e34e7daef91a5f237485bb88a260aee4be29dd with: files: src/script/backport-create-issue src/script/requirements.backport-create-issue.txt - - uses: actions/setup-python@v4 + - uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4 with: python-version: '>=3.6 <3.12' cache: 'pip' diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index 510a6bebd4e2..473adae94ffe 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -9,7 +9,7 @@ jobs: stale: runs-on: ubuntu-latest steps: - - uses: actions/stale@v9 + - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9 with: # PAT for GitHub API authentication repo-token: "${{ secrets.GITHUB_TOKEN }}" -- 2.47.3