mirror of
https://github.com/firefly-iii/firefly-iii.git
synced 2026-09-03 20:52:58 -05:00
ci: pin github-action-get-latest-release to a full commit SHA
issues-reply-old-versions.yml passes GITHUB_TOKEN (issues:write, pull-requests: write) to pozetroninc/github-action-get-latest-release via the mutable @master branch of a third-party personal repo, in two steps. Pin to the commit @master resolves to so the code that runs with the token is fixed. Behaviour unchanged.
This commit is contained in:
@@ -17,14 +17,14 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- id: ff3version
|
||||
uses: pozetroninc/github-action-get-latest-release@master
|
||||
uses: pozetroninc/github-action-get-latest-release@53d33d213ee71c72360e3c829caf7cee94ec21e2 # pins @master
|
||||
with:
|
||||
owner: firefly-iii
|
||||
repo: firefly-iii
|
||||
excludes: prerelease, draft
|
||||
token: ${{ secrets.GITHUB_TOKEN }}
|
||||
- id: importerversion
|
||||
uses: pozetroninc/github-action-get-latest-release@master
|
||||
uses: pozetroninc/github-action-get-latest-release@53d33d213ee71c72360e3c829caf7cee94ec21e2 # pins @master
|
||||
with:
|
||||
owner: firefly-iii
|
||||
repo: data-importer
|
||||
|
||||
Reference in New Issue
Block a user