From 59fd7efd134b487433705fdc830668e6828a6ef1 Mon Sep 17 00:00:00 2001 From: Dan Fiedler Date: Tue, 8 Sep 2026 16:38:01 -0400 Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs --- .github/dependabot.yml | 11 +++++++++++ .github/workflows/github-actions-cpp-check.yml | 4 ++-- .github/workflows/github-actions-python-check.yml | 4 ++-- 3 files changed, 15 insertions(+), 4 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..2c48305b --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,11 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + groups: + github-actions: + patterns: ["*"] + schedule: + interval: "weekly" + cooldown: + default-days: 7 diff --git a/.github/workflows/github-actions-cpp-check.yml b/.github/workflows/github-actions-cpp-check.yml index e3f26508..5cd92ca3 100644 --- a/.github/workflows/github-actions-cpp-check.yml +++ b/.github/workflows/github-actions-cpp-check.yml @@ -11,9 +11,9 @@ jobs: name: Check C++ Code Formatting runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0 - name: Run clang-format style check for C/C++/Protobuf programs. - uses: jidicula/clang-format-action@v4.6.2 + uses: jidicula/clang-format-action@c6b458a845552fe71b70b00b851a3ef88b1be279 # v4.6.2 with: clang-format-version: '13' exclude-regex: ^(\./build/|\./third_party/).*$ \ No newline at end of file diff --git a/.github/workflows/github-actions-python-check.yml b/.github/workflows/github-actions-python-check.yml index 5746670c..f8771930 100644 --- a/.github/workflows/github-actions-python-check.yml +++ b/.github/workflows/github-actions-python-check.yml @@ -11,9 +11,9 @@ jobs: name: Check Python Code Formatting And Lint runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0 - name: Set Up Python 3.9 - uses: actions/setup-python@v2 + uses: actions/setup-python@e9aba2c848f5ebd159c070c61ea2c4e2b122355e # v2.3.4 with: python-version: '3.9' - run: pip install -r requirements.txt