From 0047e73836705e1796cb7a1ed8abd07ee98830f5 Mon Sep 17 00:00:00 2001 From: Shane da Silva Date: Mon, 24 Aug 2026 22:22:18 -0700 Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs --- .github/workflows/cargo-update-pr.yml | 2 +- .github/workflows/deny.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/cargo-update-pr.yml b/.github/workflows/cargo-update-pr.yml index 0338581..d331a1a 100644 --- a/.github/workflows/cargo-update-pr.yml +++ b/.github/workflows/cargo-update-pr.yml @@ -48,7 +48,7 @@ jobs: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - - uses: dtolnay/rust-toolchain@master + - uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 with: toolchain: ${{ inputs.rust-toolchain }} diff --git a/.github/workflows/deny.yml b/.github/workflows/deny.yml index d33fa49..3831e68 100644 --- a/.github/workflows/deny.yml +++ b/.github/workflows/deny.yml @@ -28,7 +28,7 @@ jobs: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - - uses: dtolnay/rust-toolchain@master + - uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 with: toolchain: ${{ inputs.rust-toolchain }} - uses: EmbarkStudios/cargo-deny-action@91bf2b620e09e18d6eb78b92e7861937469acedb # v2.0.17