chore: pin actions to sha (#402)

This commit is contained in:
Etienne Stalmans
2026-04-03 08:10:59 +02:00
committed by GitHub
parent 03559d0a6c
commit 60645042c4
7 changed files with 29 additions and 19 deletions

View File

@@ -12,12 +12,12 @@ jobs:
runs-on: ubuntu-latest
# Checking the actor will prevent your Action run failing on non-Dependabot
# PRs but also ensures that it only does work for Dependabot PRs.
if: ${{ github.actor == 'dependabot[bot]' }}
if: github.actor == 'dependabot[bot]' && github.repository == github.event.pull_request.head.repo.full_name
steps:
# This first step will fail if there's no metadata and so the approval
# will not occur.
- id: meta
uses: dependabot/fetch-metadata@v2
uses: dependabot/fetch-metadata@ffa630c65fa7e0ecfa0625b5ceda64399aea1b36 # v3.0.0
with:
github-token: '${{ secrets.GITHUB_TOKEN }}'