Merge pull request #1712 from anthropics/devsec/pin-actions

Pin GitHub Actions to commit SHAs
This commit is contained in:
Joe Portner 2026-05-07 15:39:28 -04:00 committed by GitHub
commit ec1bcc3a6e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -17,7 +17,7 @@ jobs:
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
- uses: oven-sh/setup-bun@v2 - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 (sha-pinned)
- name: Install dependencies - name: Install dependencies
run: cd .github/scripts && bun install yaml run: cd .github/scripts && bun install yaml