From 2451a2301d2e565fec1344107085df1b1c54ef65 Mon Sep 17 00:00:00 2001 From: justinbanon-agent Date: Wed, 21 Oct 2026 19:42:25 +0100 Subject: [PATCH] ci: pin third-party actions to exact commit SHAs Co-Authored-By: Claude Opus 5.5 --- .github/workflows/deploy-preview.yaml | 2 +- .github/workflows/deploy_reusable.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/deploy-preview.yaml b/.github/workflows/deploy-preview.yaml index 2dd5990..d82a662 100644 --- a/.github/workflows/deploy-preview.yaml +++ b/.github/workflows/deploy-preview.yaml @@ -37,7 +37,7 @@ jobs: pull-requests: write steps: - name: Comment preview URL - uses: marocchino/sticky-pull-request-comment@v2 + uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # v2.9.4 with: header: cf-preview message: | diff --git a/.github/workflows/deploy_reusable.yaml b/.github/workflows/deploy_reusable.yaml index 62b40f1..df154d5 100644 --- a/.github/workflows/deploy_reusable.yaml +++ b/.github/workflows/deploy_reusable.yaml @@ -242,7 +242,7 @@ jobs: - name: Deploy to Cloudflare Pages id: deploy - uses: cloudflare/wrangler-action@v3 + uses: cloudflare/wrangler-action@9acf94ace14e7dc412b076f2c5c20b8ce93c79cd # v3.15.0 with: apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}