chore(gha): pin actions to commit sha

chore(gha): pin actions to commit sha Pin actions to a full length commit SHA. Ref: https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions Signed-off-by: Ryan Johnson <[email protected]>
vmware · Jun 16, 2023 · b44db12 · b44db12
1 parent e4d9fe6
commit b44db12
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 4 deletions.
diff --git a/.github/workflows/issues.yml b/.github/workflows/issues.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Apply Issue Triage Labels
-        uses: github/[email protected]
+        uses: github/issue-labeler@e24a3eb6b2e28c8904d086302a2b760647f5f45c # v3.1
         with:
           repo-token: '${{ secrets.GITHUB_TOKEN }}'
           configuration-path: .github/labeler-issues.yml

diff --git a/.github/workflows/lock.yml b/.github/workflows/lock.yml
@@ -9,7 +9,7 @@ jobs:
   lock:
     runs-on: ubuntu-latest
     steps:
-      - uses: dessant/lock-threads@v4
+      - uses: dessant/lock-threads@be8aa5be94131386884a6da4189effda9b14aa21 # v4.0.1
         with:
           github-token: '${{ secrets.GITHUB_TOKEN }}' 
           issue-comment: >

diff --git a/.github/workflows/pull-requests.yml b/.github/workflows/pull-requests.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Apply Labels
-        uses: actions/labeler@v4
+        uses: actions/labeler@9fcb2c2f5584144ca754f8bfe8c6f81e77753375 # v4.1.0
         if: github.event.action == 'opened'
         with:
           configuration-path: .github/labeler-pull-requests.yml

diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
@@ -12,7 +12,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/stale@v8
+      - uses: actions/stale@1160a2240286f5da8ec72b1c0816ce2481aabf84 # v8.0.0
         with:
           repo-token: '${{ secrets.GITHUB_TOKEN }}'
           days-before-stale: 60