From 252557c8bf8e4d912581be9f4cde3811386ed787 Mon Sep 17 00:00:00 2001 From: jdx <216188+jdx@users.noreply.github.com> Date: Thu, 30 Apr 2026 14:44:09 -0500 Subject: [PATCH] ci: pin taiki-e/install-action to commit SHA Org policy requires every action to be pinned to a full-length commit SHA. The `cargo-llvm-cov` ref is a tool-alias tag that the action's CI auto-bumps, but the policy needs an immutable SHA either way. Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/coverage.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml index eaa662ad..5c72ed2e 100644 --- a/.github/workflows/coverage.yml +++ b/.github/workflows/coverage.yml @@ -22,7 +22,7 @@ jobs: - run: rustup component add llvm-tools-preview --toolchain stable-x86_64-unknown-linux-gnu - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 - name: Install cargo-llvm-cov - uses: taiki-e/install-action@cargo-llvm-cov + uses: taiki-e/install-action@d79fce544138636ae8155ecac335f73c98e3b198 # cargo-llvm-cov - name: Generate code coverage run: mise run coverage - name: Upload coverage to Codecov