From 8ebc437c2847f4eccb1b6bfaa4180c5b55612f41 Mon Sep 17 00:00:00 2001 From: Krukon Date: Mon, 7 Sep 2026 17:39:00 +0200 Subject: [PATCH] chore: bump actions to ratified manifest SHAs - actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 -> actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 -> step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 - step-security/runs-on-cache@c5b0cba15d05488ebc630ad8d1e95b3d9b35ac73 -> step-security/runs-on-cache@e61ed9b0206c630e9a6bb5f12ca4cd78ae7bbe93 --- .github/workflows/test.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 6e1bf39..6f0bf68 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -9,12 +9,12 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2 with: use-policy-store: true api-key: ${{ secrets.GH_FRESHAENGINEERING_STEP_SECURITY_API_KEY }} - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v2 - name: Setup mise uses: step-security/mise-action@6e96d2ffbc65c037f23c78818f2a339d6cf830f7 # v4.2.4 @@ -27,7 +27,7 @@ jobs: mix local.rebar --force - name: Retrieve Mix Dependencies Cache - uses: step-security/runs-on-cache@c5b0cba15d05488ebc630ad8d1e95b3d9b35ac73 # v5.0.7 + uses: step-security/runs-on-cache@e61ed9b0206c630e9a6bb5f12ca4cd78ae7bbe93 # v5.0.7 id: mix-cache with: path: deps