From 7639085fe882acd1c6c3cfe53f763d8e1131cac1 Mon Sep 17 00:00:00 2001 From: Yu Ishikawa Date: Fri, 22 May 2026 18:25:11 +0900 Subject: [PATCH] chore(actions): pin GitHub Actions to commit SHAs Signed-off-by: Yu Ishikawa --- .github/workflows/integration_tests.yml | 4 ++-- .github/workflows/trunk_check.yml | 4 ++-- .github/workflows/trunk_upgrade.yml | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/integration_tests.yml b/.github/workflows/integration_tests.yml index c1c6729..486c026 100644 --- a/.github/workflows/integration_tests.yml +++ b/.github/workflows/integration_tests.yml @@ -17,10 +17,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # ratchet:actions/checkout@v6 - name: Setup Node.js 20 - uses: actions/setup-node@v6 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # ratchet:actions/setup-node@v6 with: node-version: "20" diff --git a/.github/workflows/trunk_check.yml b/.github/workflows/trunk_check.yml index 4727fec..a8247cc 100644 --- a/.github/workflows/trunk_check.yml +++ b/.github/workflows/trunk_check.yml @@ -33,7 +33,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # ratchet:actions/checkout@v6 - name: Trunk Check - uses: trunk-io/trunk-action@v1 + uses: trunk-io/trunk-action@75699af9e26881e564e9d832ef7dc3af25ec031b # ratchet:trunk-io/trunk-action@v1 diff --git a/.github/workflows/trunk_upgrade.yml b/.github/workflows/trunk_upgrade.yml index ebd9539..fbc16ea 100644 --- a/.github/workflows/trunk_upgrade.yml +++ b/.github/workflows/trunk_upgrade.yml @@ -30,10 +30,10 @@ jobs: pull-requests: write # For trunk to create PRs steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # ratchet:actions/checkout@v6 # >>> Install your own deps here (npm install, etc) <<< # SEE https://github.com/trunk-io/trunk-action - name: Trunk Upgrade - uses: trunk-io/trunk-action/upgrade@v1 + uses: trunk-io/trunk-action/upgrade@75699af9e26881e564e9d832ef7dc3af25ec031b # ratchet:trunk-io/trunk-action/upgrade@v1 with: signoff: true