update github actions workflows (#846)

primer · Sep 28, 2022 · 204fa81 · 204fa81
1 parent 1494c1f
commit 204fa81
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 6 deletions.
diff --git a/.github/workflows/deploy_preview.yml b/.github/workflows/deploy_preview.yml
@@ -1,4 +1,4 @@
-name: Deploy preview
+name: Deploy
 on:
   pull_request:
 
@@ -10,8 +10,9 @@ permissions:
 jobs:
   deploy:
     if: ${{ github.repository == 'primer/octicons' }}
-    name: Build and deploy
-    uses: primer/.github/.github/workflows/deploy_preview.yml@main
+    name: Preview
+    # SHA for security hardening. Points at last verified HEAD of main branch.
+    uses: primer/.github/.github/workflows/deploy_preview.yml@0cec9b9914f358846163f2428663b58da41028c9
     secrets:
       gh_token: ${{ secrets.GITHUB_TOKEN }}
     with:

diff --git a/.github/workflows/deploy_production.yml b/.github/workflows/deploy_production.yml
@@ -1,4 +1,4 @@
-name: Deploy to production
+name: Deploy
 
 on:
   push:
@@ -18,8 +18,9 @@ permissions:
 
 jobs:
   build_deploy:
-    name: Build and deploy
-    uses: primer/.github/.github/workflows/deploy.yml@main
+    name: Production
+    # Uses SHA for security hardening. Points at last verified HEAD of main branch.
+    uses: primer/.github/.github/workflows/deploy.yml@0cec9b9914f358846163f2428663b58da41028c9
     secrets:
       gh_token: ${{ secrets.GITHUB_TOKEN }}
     with: