From 381389bddc14b3f6355fc7bfd5d39d74d6854119 Mon Sep 17 00:00:00 2001 From: Fred Bricon Date: Fri, 17 Feb 2023 10:19:40 +0100 Subject: [PATCH 1/2] Pin 3rd-party actions to SHA1 in .github/workflows/modular-docs-publish.yml --- .github/workflows/modular-docs-publish.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/modular-docs-publish.yml b/.github/workflows/modular-docs-publish.yml index 1f89d985..04ce4977 100644 --- a/.github/workflows/modular-docs-publish.yml +++ b/.github/workflows/modular-docs-publish.yml @@ -40,7 +40,7 @@ jobs: java-version: 15 distribution: 'adopt' # See 'Supported distributions' for available options - name: Use Ruby 2.6 - uses: ruby/setup-ruby@v1 + uses: ruby/setup-ruby@d3c9825d67b0d8720afdfdde5af56c79fdb38d16 #v1 with: ruby-version: '2.6' @@ -54,7 +54,7 @@ jobs: env: DOCS_PRODUCT_NAME: ${{matrix.product}} - name: Deploy - uses: JamesIves/github-pages-deploy-action@4.1.5 + uses: JamesIves/github-pages-deploy-action@0f24da7de3e7e135102609a4c9633b025be8411b #4.1.5 env: DEPLOY_BRANCH: ${{matrix.branch}} with: From 943fa9653c68e3d598565db4986611766e47407d Mon Sep 17 00:00:00 2001 From: Fred Bricon Date: Fri, 17 Feb 2023 10:19:40 +0100 Subject: [PATCH 2/2] Pin 3rd-party actions to SHA1 in .github/workflows/modular-docs-check.yml --- .github/workflows/modular-docs-check.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/modular-docs-check.yml b/.github/workflows/modular-docs-check.yml index 2efb79c5..fc8572f7 100644 --- a/.github/workflows/modular-docs-check.yml +++ b/.github/workflows/modular-docs-check.yml @@ -33,7 +33,7 @@ jobs: java-version: 15 distribution: 'adopt' # See 'Supported distributions' for available options - name: Use Ruby 2.6 - uses: ruby/setup-ruby@v1 + uses: ruby/setup-ruby@d3c9825d67b0d8720afdfdde5af56c79fdb38d16 #v1 with: ruby-version: '2.6'