gsadmin/meet
1
0
Fork 0
mirror of https://github.com/suitenumerique/meet.git synced 2026-09-01 05:07:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

🔒️(ci) pin every action to a full commit hash

Browse Source 
A tag and a branch both move, so actions/checkout@v6 and
numerique-gouv/action-trivy-cache@main ran whatever the owner had last
pushed. Each of the 65 uses now names a 40-character commit, with the
version it resolved to in a trailing comment.

dependabot.yml keeps the hash and that comment moving together.
This commit is contained in:
davd-gzl
2026-08-15 14:52:26 +00:00
committed by aleb_the_flash
parent a24100aceb
commit aafbc752d5
5 changed files with 73 additions and 65 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/crowdin-download.yml
+2 -2
View File
@@ -13,10 +13,10 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v6
uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
- name: Download Crowdin files
uses: crowdin/github-action@v2
uses: crowdin/github-action@c7af9bc98b01694653031fef2a0dc6c7888ce9bc # v2.17.0
with:
upload_sources: false
upload_translations: false