From 59af8eb140388c97f79993b1b74e45d1c49dc84f Mon Sep 17 00:00:00 2001 From: HeavenVR Date: Wed, 6 May 2026 22:03:56 +0200 Subject: [PATCH] security: Pin Github Actions --- .github/workflows/ci-build.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml index 88d5995..8a1016b 100644 --- a/.github/workflows/ci-build.yml +++ b/.github/workflows/ci-build.yml @@ -22,15 +22,15 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup .NET SDK ${{ env.DOTNET_VERSION }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0 with: dotnet-version: ${{ env.DOTNET_VERSION }} - name: Cache NuGet packages - uses: actions/cache@v3 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: ~/.nuget/packages key: ${{ runner.os }}-nuget @@ -41,7 +41,7 @@ jobs: run: dotnet publish ShockOsc/ShockOsc.csproj -c Release -o ./publish/ - name: Upload ShockOSC artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: ShockOsc path: publish/*