Skip to content

Conversation

andrewlock
Copy link
Member

Summary of changes

Pins the action used inside our custom actions to sha

Reason for change

We pinned all the actions that are used in workflows, but we should pin the ones used in actions too

Implementation details

  • Check what the current version is, grab the sha, use it
  • Didn't update the version at all, just used whatever we're currently pinned to

Test coverage

Nope

@andrewlock andrewlock added the area:builds project files, build scripts, pipelines, versioning, releases, packages label Mar 17, 2025
@andrewlock andrewlock requested a review from a team as a code owner March 17, 2025 15:21
Copy link
Collaborator

@bouwkast bouwkast left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@andrewlock andrewlock merged commit d6cb804 into master Mar 17, 2025
100 of 103 checks passed
@andrewlock andrewlock deleted the andrew/ci/pin-actions branch March 17, 2025 16:30
@github-actions github-actions bot added this to the vNext-v3 milestone Mar 17, 2025
ddyurchenko pushed a commit that referenced this pull request Mar 31, 2025
## Summary of changes

Pins the action used inside our custom actions to sha

## Reason for change

We pinned all the actions that are used in workflows, but we should pin
the ones used in actions too

## Implementation details

- Check what the current version is, grab the sha, use it
- Didn't update the version at all, just used whatever we're _currently_
pinned to

## Test coverage

Nope
chojomok pushed a commit that referenced this pull request Jul 15, 2025
## Summary of changes

Pins the action used inside our custom actions to sha

## Reason for change

We pinned all the actions that are used in workflows, but we should pin
the ones used in actions too

## Implementation details

- Check what the current version is, grab the sha, use it
- Didn't update the version at all, just used whatever we're _currently_
pinned to

## Test coverage

Nope
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area:builds project files, build scripts, pipelines, versioning, releases, packages
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants