Skip to content

Commit 3dbc5b1

Browse files
committed
ci(workflows): pin 3rd party actions
1 parent 359abb1 commit 3dbc5b1

16 files changed

+46
-46
lines changed

.github/workflows/auto-cleanup-bot.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ on:
55
- cron: "0 0 * * *"
66
workflow_dispatch:
77

8-
# No GITHUB_TOKEN permissions, as we only use it to increase API limit.
8+
# No GITHUB_TOKEN permissions, as we only use it to increase API limit.
99
# We use AUTOMERGE_TOKEN to create the PR.
1010
permissions: {}
1111

@@ -15,12 +15,12 @@ jobs:
1515
runs-on: ubuntu-latest
1616

1717
steps:
18-
- uses: actions/checkout@v5
18+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
1919
with:
2020
persist-credentials: false
2121

2222
- name: Setup Node.js environment
23-
uses: actions/setup-node@v6
23+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
2424
with:
2525
node-version-file: ".nvmrc"
2626
package-manager-cache: false

.github/workflows/interfacedata-updater.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,20 +16,20 @@ jobs:
1616

1717
steps:
1818
- name: Checkout content
19-
uses: actions/checkout@v5
19+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2020
with:
2121
path: mdn-content
2222
ref: main
2323
persist-credentials: false
2424

2525
- name: Setup node.js
26-
uses: actions/setup-node@v6
26+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
2727
with:
2828
node-version-file: "mdn-content/.nvmrc"
2929
package-manager-cache: false
3030

3131
- name: Checkout webref
32-
uses: actions/checkout@v5
32+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3333
with:
3434
repository: w3c/webref
3535
path: webref

.github/workflows/issue-regex-labeler.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ jobs:
1111
issue-labeler:
1212
runs-on: ubuntu-latest
1313
steps:
14-
- uses: github/issue-labeler@v3.4
14+
- uses: github/issue-labeler@c1b0f9f52a63158c4adc09425e858e87b32e9685 # v3.4
1515
with:
1616
repo-token: "${{ secrets.GITHUB_TOKEN }}"
1717
configuration-path: .github/issue-regex-labeler.yml

.github/workflows/markdown-lint.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,12 +21,12 @@ jobs:
2121
runs-on: ubuntu-latest
2222

2323
steps:
24-
- uses: actions/checkout@v5
24+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2525
with:
2626
persist-credentials: false
2727

2828
- name: Setup Node.js environment
29-
uses: actions/setup-node@v6
29+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
3030
with:
3131
node-version-file: ".nvmrc"
3232
cache: yarn

.github/workflows/pr-check-lint_content.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323

2424
steps:
2525
- name: Checkout BASE
26-
uses: actions/checkout@v5
26+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2727
with:
2828
persist-credentials: false
2929

@@ -57,7 +57,7 @@ jobs:
5757
5858
- name: Checkout HEAD
5959
if: steps.check.outputs.HAS_FILES == 'true'
60-
uses: actions/checkout@v5
60+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
6161
with:
6262
ref: ${{ github.event.pull_request.head.sha }}
6363
path: pr_head
@@ -81,7 +81,7 @@ jobs:
8181
8282
- name: Setup Node.js environment
8383
if: steps.check.outputs.HAS_FILES == 'true'
84-
uses: actions/setup-node@v6
84+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
8585
with:
8686
node-version-file: ".nvmrc"
8787
cache: yarn

.github/workflows/pr-check_cspell_lists.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
docs:
1515
runs-on: ubuntu-latest
1616
steps:
17-
- uses: actions/checkout@v5
17+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
1818
with:
1919
sparse-checkout-cone-mode: false
2020
sparse-checkout: |
@@ -25,7 +25,7 @@ jobs:
2525
persist-credentials: false
2626

2727
- name: Setup Node.js environment
28-
uses: actions/setup-node@v6
28+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
2929
with:
3030
node-version-file: ".nvmrc"
3131

.github/workflows/pr-check_javascript.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,12 @@ jobs:
1818
runs-on: ubuntu-latest
1919

2020
steps:
21-
- uses: actions/checkout@v5
21+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2222
with:
2323
persist-credentials: false
2424

2525
- name: Setup Node.js environment
26-
uses: actions/setup-node@v6
26+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
2727
with:
2828
node-version-file: ".nvmrc"
2929
cache: yarn

.github/workflows/pr-check_json.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,12 @@ jobs:
1818
runs-on: ubuntu-latest
1919

2020
steps:
21-
- uses: actions/checkout@v5
21+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2222
with:
2323
persist-credentials: false
2424

2525
- name: Setup Node.js environment
26-
uses: actions/setup-node@v6
26+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
2727
with:
2828
node-version-file: ".nvmrc"
2929
cache: yarn

.github/workflows/pr-check_redirects.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,12 +13,12 @@ jobs:
1313
runs-on: ubuntu-latest
1414

1515
steps:
16-
- uses: actions/checkout@v5
16+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
1717
with:
1818
persist-credentials: false
1919

2020
- name: Setup Node.js environment
21-
uses: actions/setup-node@v6
21+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
2222
with:
2323
node-version-file: ".nvmrc"
2424
cache: yarn

.github/workflows/pr-check_scripts.yml

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,12 @@ jobs:
1818
runs-on: ubuntu-latest
1919

2020
steps:
21-
- uses: actions/checkout@v5
21+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2222
with:
2323
persist-credentials: false
2424

2525
- name: Setup Node.js environment
26-
uses: actions/setup-node@v6
26+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
2727
with:
2828
node-version-file: ".nvmrc"
2929
cache: yarn
@@ -40,12 +40,12 @@ jobs:
4040
runs-on: ubuntu-latest
4141

4242
steps:
43-
- uses: actions/checkout@v5
43+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4444
with:
4545
persist-credentials: false
4646

4747
- name: Setup Node.js environment
48-
uses: actions/setup-node@v6
48+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
4949
with:
5050
node-version-file: ".nvmrc"
5151
cache: yarn
@@ -82,12 +82,12 @@ jobs:
8282
runs-on: ubuntu-latest
8383

8484
steps:
85-
- uses: actions/checkout@v5
85+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
8686
with:
8787
persist-credentials: false
8888

8989
- name: Setup Node.js environment
90-
uses: actions/setup-node@v6
90+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
9191
with:
9292
node-version-file: ".nvmrc"
9393
cache: yarn
@@ -104,12 +104,12 @@ jobs:
104104
runs-on: ubuntu-latest
105105

106106
steps:
107-
- uses: actions/checkout@v5
107+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
108108
with:
109109
persist-credentials: false
110110

111111
- name: Setup Node.js environment
112-
uses: actions/setup-node@v6
112+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
113113
with:
114114
node-version-file: ".nvmrc"
115115
cache: yarn
@@ -130,12 +130,12 @@ jobs:
130130
runs-on: ubuntu-latest
131131

132132
steps:
133-
- uses: actions/checkout@v5
133+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
134134
with:
135135
persist-credentials: false
136136

137137
- name: Setup Node.js environment
138-
uses: actions/setup-node@v6
138+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
139139
with:
140140
node-version-file: ".nvmrc"
141141
cache: yarn

0 commit comments

Comments
 (0)