From 9ed8146737da93ce8d1c1156f252523bc3f37f62 Mon Sep 17 00:00:00 2001 From: Dan Fiedler Date: Sun, 23 Aug 2026 20:23:38 -0400 Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs --- .github/dependabot.yml | 11 +++++++++++ .github/workflows/spellcheck-action.yml | 2 +- 2 files changed, 12 insertions(+), 1 deletion(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..2c48305b --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,11 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + groups: + github-actions: + patterns: ["*"] + schedule: + interval: "weekly" + cooldown: + default-days: 7 diff --git a/.github/workflows/spellcheck-action.yml b/.github/workflows/spellcheck-action.yml index fa82add2..fb499347 100644 --- a/.github/workflows/spellcheck-action.yml +++ b/.github/workflows/spellcheck-action.yml @@ -13,7 +13,7 @@ jobs: permissions: read-all steps: - uses: actions/checkout@master - - uses: rojopolis/spellcheck-github-actions@0.29.0 + - uses: rojopolis/spellcheck-github-actions@58bd6665414e77e1d08688ff54323e01b9b434e5 # 0.29.0 name: Spellcheck with: task_name: Markdown