From ae5554784fcc7b91e6c36cb7242be770559abd40 Mon Sep 17 00:00:00 2001 From: Dan Fiedler Date: Sat, 5 Sep 2026 20:53:42 -0400 Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs --- .github/dependabot.yaml | 2 ++ .github/workflows/template-validation.yaml | 4 ++-- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml index 0bb2852..4564704 100644 --- a/.github/dependabot.yaml +++ b/.github/dependabot.yaml @@ -10,3 +10,5 @@ updates: github-actions: patterns: - "*" + cooldown: + default-days: 7 \ No newline at end of file diff --git a/.github/workflows/template-validation.yaml b/.github/workflows/template-validation.yaml index a5f775a..6b7ddb0 100644 --- a/.github/workflows/template-validation.yaml +++ b/.github/workflows/template-validation.yaml @@ -13,9 +13,9 @@ jobs: runs-on: ubuntu-latest name: template validation steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - - uses: microsoft/template-validation-action@v0.4.4 + - uses: microsoft/template-validation-action@bae4895d0a8abd4f0d5aad68ae8647b3027f4c91 # v0.4.4 env: AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }} AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}