Merge pull request #76 from github/jm-github-action-shas-and-pull-req…

…uest-target-for-releases chore: use SHAs in GitHub Actions and pull_request_target for releases
github · May 21, 2024 · 2001c16 · 2001c16
2 parents 68ea114 + cda00a7
commit 2001c16
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -8,6 +8,11 @@
         - closed
       branches:
         - main
+    pull_request_target:
+      types:
+        - closed
+      branches:
+        - main
 
   permissions:
     contents: read

diff --git a/.github/workflows/stale.yaml b/.github/workflows/stale.yaml
@@ -1,20 +1,17 @@
----
 name: 'Close stale issues'
 on:
   schedule:
     - cron: '30 1 * * *'
-
 permissions:
   contents: read
-
 jobs:
   stale:
     runs-on: ubuntu-latest
     permissions:
       issues: write
       pull-requests: read
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9
         with:
           stale-issue-message: 'This issue is stale because it has been open 21 days with no activity. Remove stale label or comment or this will be closed in 14 days.'
           close-issue-message: 'This issue was closed because it has been stalled for 35 days with no activity.'