Pinned GitHub actions by SHA (#1963)

- Pinned GitHub actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
2026-10-19 05:22:06 +02:00 · 2022-03-07 13:34:23 -05:00
parent 3296225513
commit 20e18132b0
3 changed files with 18 additions and 12 deletions
@@ -6,13 +6,16 @@ on:
  pull_request:
    branches: ['main']

+permissions:
+  contents: read
+
 jobs:
  tests:
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/setup-go@v2
+    - uses: actions/setup-go@bfdd3570ce990073878bf10f6b2d79082de49492 # v2
      with:
        go-version: 1.17
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@b0e28b5ac45a892f91e7d036f8200cf5ed489415 # v3

    - run: make test