From 0e7775d2078155f813ac33a0abd91183e93da91c Mon Sep 17 00:00:00 2001 From: Paul McCann Date: Thu, 20 Mar 2025 11:42:06 +0000 Subject: [PATCH] Update ci_template.yaml Pinning action to a full length commit SHA [see](https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions) --- .github/workflows/ci_template.yaml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/ci_template.yaml b/.github/workflows/ci_template.yaml index b394f02..e4dfadd 100644 --- a/.github/workflows/ci_template.yaml +++ b/.github/workflows/ci_template.yaml @@ -27,7 +27,7 @@ jobs: fetch-depth: 2 - name: .NET Setup - uses: zyactions/dotnet-setup@v1 + uses: zyactions/dotnet-setup@8f4b644ff5ff19bba913663df285b7b7278bb724 # v1.0.1 with: global-json-file: ${{ env.DOTNET_GLOBAL_JSON }} problem-matcher: false @@ -51,7 +51,7 @@ jobs: restore-keys: ${{ runner.os }}-nuget- - name: .NET Restore - uses: zyactions/dotnet-restore@v1 + uses: zyactions/dotnet-restore@bffc71e1a5275122a2795bf2912804f0185db27c # v1.1.0 with: working-directory: ${{ inputs.path }} @@ -59,7 +59,7 @@ jobs: # TODO: Always lint all files, if '.editorconfig' has changed - name: .NET Lint - uses: zyactions/dotnet-lint@v1 + uses: zyactions/dotnet-lint@a86bc2ec7f63119966cf70cafb56de1c2681cc85 # v1.1.0 with: working-directory: ${{ inputs.path }} # This list is empty for the initial commit. NET Lint will lint all files in this case. @@ -91,7 +91,7 @@ jobs: output: ${{ env.FILTERED_SOLUTION }} - name: .NET Setup - uses: zyactions/dotnet-setup@v1 + uses: zyactions/dotnet-setup@8f4b644ff5ff19bba913663df285b7b7278bb724 # v1.0.1 with: global-json-file: ${{ env.DOTNET_GLOBAL_JSON }} problem-matcher: false @@ -104,7 +104,7 @@ jobs: restore-keys: ${{ runner.os }}-nuget- - name: .NET Restore - uses: zyactions/dotnet-restore@v1 + uses: zyactions/dotnet-restore@bffc71e1a5275122a2795bf2912804f0185db27c # v1.1.0 with: workspace: ${{ env.FILTERED_SOLUTION }}