mirror of
https://github.com/anthropics/claude-plugins-official.git
synced 2026-07-17 06:38:14 -03:00
Repoint action pins to include allowlist matching hardening
This commit is contained in:
parent
c33c5bd093
commit
994f24027b
2
.github/workflows/bump-plugin-shas.yml
vendored
2
.github/workflows/bump-plugin-shas.yml
vendored
@ -51,7 +51,7 @@ jobs:
|
||||
|
||||
# createCommitOnBranch-based bump so commits are signed by GitHub and
|
||||
# satisfy the org-level required_signatures ruleset on main.
|
||||
- uses: anthropics/claude-plugins-community/.github/actions/bump-plugin-shas@21b3d7589d1e1033f7899f7d26b487d98c10fdca
|
||||
- uses: anthropics/claude-plugins-community/.github/actions/bump-plugin-shas@2324c6d8d9d8ceebc9bf253e5d683320dbf40760
|
||||
id: bump
|
||||
with:
|
||||
marketplace-path: .claude-plugin/marketplace.json
|
||||
|
||||
2
.github/workflows/validate-plugins.yml
vendored
2
.github/workflows/validate-plugins.yml
vendored
@ -32,7 +32,7 @@ jobs:
|
||||
with:
|
||||
fetch-depth: 0
|
||||
|
||||
- uses: anthropics/claude-plugins-community/.github/actions/validate-plugins@21b3d7589d1e1033f7899f7d26b487d98c10fdca
|
||||
- uses: anthropics/claude-plugins-community/.github/actions/validate-plugins@2324c6d8d9d8ceebc9bf253e5d683320dbf40760
|
||||
with:
|
||||
marketplace-path: .claude-plugin/marketplace.json
|
||||
# Official curated marketplace: SHA-pin (I5) is a HARD error.
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user