Changeset 60050

Timestamp:

03/19/2025 12:16:28 PM (10 months ago)

Author:

desrosj

Message:

Build/Test Tools: Pin full commit SHA for rhysd/actionlint.

This is a recommended best practice for hardening workflows that are utilizing 3rd party actions.

Follow up to [59679].

Props johnbillion.
See #62221.

File:

• trunk/.github/workflows/reusable-workflow-lint.yml (modified) (1 diff)

trunk/.github/workflows/reusable-workflow-lint.yml

@@ -30 +30 @@
       # See https://github.com/rhysd/actionlint.
       - name: Run actionlint
-        uses: docker://rhysd/actionlint:1.7.7
+        uses: docker://rhysd/actionlint@sha256:887a259a5a534f3c4f36cb02dca341673c6089431057242cdc931e9f133147e9 # v1.7.7
         with:
           args: "-color -verbose"