feat: pin workflow action sha

use frizbee to workflow action sha Signed-off-by: Rui Chen <[email protected]>
shuaibiyy · Dec 13, 2024 · 12939c1 · 12939c1
1 parent 5f08eaa
commit 12939c1
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/.github/workflows/markdown-link-check.yml b/.github/workflows/markdown-link-check.yml
@@ -6,8 +6,8 @@ jobs:
   check:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       # upstream issue, https://github.com/tcort/markdown-link-check/issues/196
-      - uses: gaurav-nelson/[email protected]
+      - uses: gaurav-nelson/github-action-markdown-link-check@d53a906aa6b22b8979d33bc86170567e619495ec # 1.0.15
         with:
           config-file: '.github/workflows/markdown.links.config.json'
diff --git a/.github/workflows/misspell.yml b/.github/workflows/misspell.yml
@@ -11,8 +11,8 @@ jobs:
   misspell:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: misspell
-        uses: reviewdog/action-misspell@v1
+        uses: reviewdog/action-misspell@18ffb61effb93b47e332f185216be7e49592e7e1 # v1
         with:
           locale: "US"
diff --git a/.github/workflows/notfound.yml b/.github/workflows/notfound.yml
@@ -9,8 +9,8 @@ jobs:
   check:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Fix links
-        uses: tmcw/[email protected]
+        uses: tmcw/notfoundbot@f91be597e4a7e2a182788b1c5ffdc460df3195ea # v2.3.1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}