diff --git a/.github/workflows/commitlint.yml b/.github/workflows/commitlint.yml index 935e4ddd..1d51de50 100644 --- a/.github/workflows/commitlint.yml +++ b/.github/workflows/commitlint.yml @@ -6,11 +6,14 @@ on: - main pull_request: +permissions: + contents: read + jobs: commitlint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 100 - - uses: wagoid/commitlint-github-action@v5 + - uses: wagoid/commitlint-github-action@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed # v6.2.1 diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 7d9aaf64..d85258eb 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -6,14 +6,17 @@ on: - main pull_request: +permissions: + contents: read + jobs: lint: name: Lint using ESLint runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Use latest Node.js LTS - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: lts/* - name: Install dependencies @@ -23,8 +26,10 @@ jobs: test: name: Test on Node.js - uses: pkgjs/action/.github/workflows/node-test.yaml@v0 + uses: aduh95/action/.github/workflows/node-test.yaml@f6f22a37631916d230df6d3aac2cefdae1a6bfea # v0.1.10 with: + action-repository: aduh95/action + action-ref: f6f22a37631916d230df6d3aac2cefdae1a6bfea runs-on: ubuntu-latest, macos-latest test-command: npm run coverage:ci post-test-steps: | diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 5fa54aa8..0cec96d5 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -14,7 +14,7 @@ jobs: outputs: release_created: ${{ steps.release.outputs.release_created }} steps: - - uses: googleapis/release-please-action@v4 + - uses: googleapis/release-please-action@a02a34c4d625f9be7cb89156071d8567266a2445 # v4.2.0 id: release with: release-type: node @@ -24,8 +24,8 @@ jobs: if: ${{ needs.release-please.outputs.release_created }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: lts/* registry-url: 'https://registry.npmjs.org'