chore(deps): pin dependencies

ffxivita · Jul 9, 2023 · db220d7 · db220d7
1 parent d718208
commit db220d7
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 12 deletions.
diff --git a/.github/workflows/build-validation.yml b/.github/workflows/build-validation.yml
@@ -12,7 +12,7 @@ jobs:
     steps:
       - name: Get PR SHA
         id: sha
-        uses: actions/github-script@v5
+        uses: actions/github-script@211cb3fefb35a799baa5156f9321bb774fe56294 # v5
         with:
           result-encoding: string
           script: |
@@ -23,20 +23,20 @@ jobs:
               pull_number: number,
             });
             return pr.data.head.sha
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
         with:
           ref: ${{ steps.sha.outputs.result }}
           fetch-depth: 0
       - name: Make Build
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@e9aba2c848f5ebd159c070c61ea2c4e2b122355e # v2
         with:
           python-version: 3.x
       - run: |
           pip install -r requirements.txt
           mkdocs build -s
       - name: Message failure
         if: ${{ failure() }}
-        uses: actions/github-script@v5
+        uses: actions/github-script@211cb3fefb35a799baa5156f9321bb774fe56294 # v5
         with:
           script: |
             github.rest.issues.createComment({

diff --git a/.github/workflows/issues.yml b/.github/workflows/issues.yml
@@ -5,7 +5,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: add-new-issues-to-repository-based-project-column
-        uses: docker://takanabe/github-actions-automate-projects:v0.0.1
+        uses: docker://takanabe/github-actions-automate-projects:v0.0.1@sha256:16a589147dec088f73735a477f274135595ab90d414aba76b6c1e0d65df8f73c
         if: github.event_name == 'issues' && github.event.action == 'opened'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

diff --git a/.github/workflows/manual-validation.yml b/.github/workflows/manual-validation.yml
@@ -11,7 +11,7 @@ jobs:
     if: ${{ github.event.issue.pull_request && github.repository_owner == 'ffxivita' && github.event.comment.body == 'check build' }}
     steps:
       - name: React to comment
-        uses: actions/github-script@v5
+        uses: actions/github-script@211cb3fefb35a799baa5156f9321bb774fe56294 # v5
         with:
           script: |
             const {owner, repo} = context.issue;
@@ -23,7 +23,7 @@ jobs:
             });
       - name: Get PR SHA
         id: sha
-        uses: actions/github-script@v5
+        uses: actions/github-script@211cb3fefb35a799baa5156f9321bb774fe56294 # v5
         with:
           result-encoding: string
           script: |
@@ -34,20 +34,20 @@ jobs:
               pull_number: number,
             });
             return pr.data.head.sha
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
         with:
           ref: ${{ steps.sha.outputs.result }}
           fetch-depth: 0
       - name: Make Build
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@e9aba2c848f5ebd159c070c61ea2c4e2b122355e # v2
         with:
           python-version: 3.x
       - run: |
           pip install -r requirements.txt
           mkdocs build -s
       - name: Message success
         if: ${{ success() }}
-        uses: actions/github-script@v5
+        uses: actions/github-script@211cb3fefb35a799baa5156f9321bb774fe56294 # v5
         with:
           script: |
             github.rest.issues.createComment({
@@ -58,7 +58,7 @@ jobs:
             });
       - name: Message failure
         if: ${{ failure() }}
-        uses: actions/github-script@v5
+        uses: actions/github-script@211cb3fefb35a799baa5156f9321bb774fe56294 # v5
         with:
           script: |
             github.rest.issues.createComment({

diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
@@ -7,6 +7,6 @@ jobs:
   title:
     runs-on: ubuntu-latest
     steps:
-      - uses: amannn/action-semantic-pull-request@v3.4.5
+      - uses: amannn/action-semantic-pull-request@4feeedbc065232b05e657d69d072355d0c7cb8ea # v3.4.5
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}