From 49b8a0982d9500c3098b08dacf90de78fa989175 Mon Sep 17 00:00:00 2001 From: Shizuo Fujita Date: Fri, 27 Mar 2026 16:13:52 +0900 Subject: [PATCH] ci: use sha pinning to mitigate Signed-off-by: Shizuo Fujita --- .github/workflows/linux.yml | 4 ++-- .github/workflows/windows.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml index 7b91abf..1e8ad7b 100644 --- a/.github/workflows/linux.yml +++ b/.github/workflows/linux.yml @@ -25,8 +25,8 @@ jobs: - ubuntu-latest name: Ruby ${{ matrix.ruby }} unit testing on ${{ matrix.os }} steps: - - uses: actions/checkout@v6 - - uses: ruby/setup-ruby@v1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: ruby/setup-ruby@4dc28cf14d77b0afa6832d9765ac422dbf0dfedd # v1.298.0 with: ruby-version: ${{ matrix.ruby }} - name: unit testing diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml index f13b211..a4b4d89 100644 --- a/.github/workflows/windows.yml +++ b/.github/workflows/windows.yml @@ -25,8 +25,8 @@ jobs: - windows-latest name: Ruby ${{ matrix.ruby }} unit testing on ${{ matrix.os }} steps: - - uses: actions/checkout@v6 - - uses: ruby/setup-ruby@v1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: ruby/setup-ruby@4dc28cf14d77b0afa6832d9765ac422dbf0dfedd # v1.298.0 with: ruby-version: ${{ matrix.ruby }} - name: unit testing