From 1103cc6526e7fc893ed2872afd90ed71dd9aa448 Mon Sep 17 00:00:00 2001 From: Dan Fiedler Date: Wed, 7 Oct 2026 15:49:08 -0400 Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs --- .github/workflows/cover.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/cover.yaml b/.github/workflows/cover.yaml index 64d5727..786289b 100644 --- a/.github/workflows/cover.yaml +++ b/.github/workflows/cover.yaml @@ -10,7 +10,7 @@ jobs: coverage: runs-on: ubuntu-latest steps: - - uses: actions/checkout@master + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: test + calculate coverage run: "bash ci/cover.sh" - uses: codecov/codecov-action@29386c70ef20e286228c72b668a06fd0e8399192 # v1.5.2