From 523057b72006869ecce4cb16030d890a11b508d7 Mon Sep 17 00:00:00 2001 From: StepSecurity Bot Date: Mon, 9 Sep 2024 01:42:10 +0000 Subject: [PATCH] [StepSecurity] ci: Harden GitHub Actions Signed-off-by: StepSecurity Bot --- .github/workflows/dev-workflow.yml | 6 +++--- .github/workflows/dist-workflow.yml | 8 ++++---- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/dev-workflow.yml b/.github/workflows/dev-workflow.yml index d829e0f5..75527670 100644 --- a/.github/workflows/dev-workflow.yml +++ b/.github/workflows/dev-workflow.yml @@ -38,7 +38,7 @@ jobs: tuf-repo-cdn.sigstore.dev:443 oauth2.sigstore.dev:443 - - uses: OZI-Project/checkpoint@1.0.0 + - uses: OZI-Project/checkpoint@b53cf4f0aeb004d5980b72675fba6a38dcc66674 # 1.0.0 with: python-version: "3.10" @@ -68,7 +68,7 @@ jobs: tuf-repo-cdn.sigstore.dev:443 oauth2.sigstore.dev:443 - - uses: OZI-Project/checkpoint@1.0.0 + - uses: OZI-Project/checkpoint@b53cf4f0aeb004d5980b72675fba6a38dcc66674 # 1.0.0 with: python-version: "3.11" @@ -98,6 +98,6 @@ jobs: tuf-repo-cdn.sigstore.dev:443 oauth2.sigstore.dev:443 - - uses: OZI-Project/checkpoint@1.0.0 + - uses: OZI-Project/checkpoint@b53cf4f0aeb004d5980b72675fba6a38dcc66674 # 1.0.0 with: python-version: "3.12" diff --git a/.github/workflows/dist-workflow.yml b/.github/workflows/dist-workflow.yml index d0150d11..c5d4d7ed 100644 --- a/.github/workflows/dist-workflow.yml +++ b/.github/workflows/dist-workflow.yml @@ -40,7 +40,7 @@ jobs: tuf-repo-cdn.sigstore.dev:443 oauth2.sigstore.dev:443 - - uses: OZI-Project/checkpoint@1.0.0 + - uses: OZI-Project/checkpoint@b53cf4f0aeb004d5980b72675fba6a38dcc66674 # 1.0.0 with: python-version: "3.10" parallel: false @@ -71,7 +71,7 @@ jobs: tuf-repo-cdn.sigstore.dev:443 oauth2.sigstore.dev:443 - - uses: OZI-Project/checkpoint@1.0.0 + - uses: OZI-Project/checkpoint@b53cf4f0aeb004d5980b72675fba6a38dcc66674 # 1.0.0 with: python-version: "3.11" parallel: false @@ -102,7 +102,7 @@ jobs: tuf-repo-cdn.sigstore.dev:443 oauth2.sigstore.dev:443 - - uses: OZI-Project/checkpoint@1.0.0 + - uses: OZI-Project/checkpoint@b53cf4f0aeb004d5980b72675fba6a38dcc66674 # 1.0.0 with: python-version: "3.12" parallel: false @@ -188,7 +188,7 @@ jobs: downloads.python.org:443 oauth2.sigstore.dev:443 - - uses: OZI-Project/release@1.0.0 + - uses: OZI-Project/release@98248899bb8b235e3198105f080093ea5b9751d8 # 1.0.0 id: release with: tag: ${{ needs.draft.outputs.tag }}