Repoint action pins to include allowlist matching hardening

This commit is contained in:
tobin 2026-06-03 17:04:12 +00:00
parent c33c5bd093
commit 994f24027b
No known key found for this signature in database
2 changed files with 2 additions and 2 deletions

View File

@ -51,7 +51,7 @@ jobs:
# createCommitOnBranch-based bump so commits are signed by GitHub and
# satisfy the org-level required_signatures ruleset on main.
- uses: anthropics/claude-plugins-community/.github/actions/bump-plugin-shas@21b3d7589d1e1033f7899f7d26b487d98c10fdca
- uses: anthropics/claude-plugins-community/.github/actions/bump-plugin-shas@2324c6d8d9d8ceebc9bf253e5d683320dbf40760
id: bump
with:
marketplace-path: .claude-plugin/marketplace.json

View File

@ -32,7 +32,7 @@ jobs:
with:
fetch-depth: 0
- uses: anthropics/claude-plugins-community/.github/actions/validate-plugins@21b3d7589d1e1033f7899f7d26b487d98c10fdca
- uses: anthropics/claude-plugins-community/.github/actions/validate-plugins@2324c6d8d9d8ceebc9bf253e5d683320dbf40760
with:
marketplace-path: .claude-plugin/marketplace.json
# Official curated marketplace: SHA-pin (I5) is a HARD error.