chore: pin GitHub Actions to SHAs (#1625)

2026-06-13 00:44:12 +03:00
parent 3bbd42587e
commit 20db4cbb27
14 changed files with 63 additions and 63 deletions
@@ -21,19 +21,19 @@ jobs:
    steps:
      - name: Generate bot app token
        id: app-token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2.2.2
        with:
          app-id: ${{ secrets.OC_REVIEW_APP_ID }}
          private-key: ${{ secrets.OC_REVIEW_APP_PRIVATE_KEY }}

      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          fetch-depth: 1
          token: ${{ steps.app-token.outputs.token }}

      - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0

      - name: Install dependencies
        run: bun install --frozen-lockfile