From 5a90ff66c342c928ac7e8c1b86c390249a60e8d0 Mon Sep 17 00:00:00 2001 From: Nara Kasbergen Date: Mon, 8 Jan 2024 12:58:01 +0100 Subject: [PATCH] chore(deps): pin trusted workflows based on HashiCorp TSCCR --- .github/workflows/deploy-cdktf-stacks.yml | 2 +- .github/workflows/diff-cdktf-stacks.yml | 2 +- .github/workflows/stale.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/deploy-cdktf-stacks.yml b/.github/workflows/deploy-cdktf-stacks.yml index a19d7ce..665ce81 100644 --- a/.github/workflows/deploy-cdktf-stacks.yml +++ b/.github/workflows/deploy-cdktf-stacks.yml @@ -31,7 +31,7 @@ jobs: cli_config_credentials_token: ${{ secrets.TF_CLOUD_TOKEN }} terraform_wrapper: false - - uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0 + - uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1 with: node-version: "18" diff --git a/.github/workflows/diff-cdktf-stacks.yml b/.github/workflows/diff-cdktf-stacks.yml index e4afc18..2b1f1dd 100644 --- a/.github/workflows/diff-cdktf-stacks.yml +++ b/.github/workflows/diff-cdktf-stacks.yml @@ -29,7 +29,7 @@ jobs: terraform_wrapper: false - name: Setup Node.js - uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0 + uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1 with: node-version: "18" diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index 47d8019..8f08e99 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -11,7 +11,7 @@ jobs: stale: runs-on: ubuntu-latest steps: - - uses: actions/stale@1160a2240286f5da8ec72b1c0816ce2481aabf84 # v8.0.0 + - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9.0.0 with: # For issues: post a "warning" message after 30 days, then close if another 30 days pass without a response. In another workflow, issues closed for 30 days will be locked. stale-issue-message: "Hi there! 👋 We haven't heard from you in 30 days and would like to know if the problem has been resolved or if you still need help. If we don't hear from you before then, I'll auto-close this issue in 30 days."