ci: pin github-action-get-latest-release to a full commit SHA

issues-reply-old-versions.yml passes GITHUB_TOKEN (issues:write, pull-requests:
write) to pozetroninc/github-action-get-latest-release via the mutable @master
branch of a third-party personal repo, in two steps. Pin to the commit @master
resolves to so the code that runs with the token is fixed. Behaviour unchanged.
This commit is contained in:
kobihikri
2026-07-14 15:05:08 +03:00
parent 0d9800909b
commit b098918f20
@@ -17,14 +17,14 @@ jobs:
runs-on: ubuntu-latest
steps:
- id: ff3version
uses: pozetroninc/github-action-get-latest-release@master
uses: pozetroninc/github-action-get-latest-release@53d33d213ee71c72360e3c829caf7cee94ec21e2 # pins @master
with:
owner: firefly-iii
repo: firefly-iii
excludes: prerelease, draft
token: ${{ secrets.GITHUB_TOKEN }}
- id: importerversion
uses: pozetroninc/github-action-get-latest-release@master
uses: pozetroninc/github-action-get-latest-release@53d33d213ee71c72360e3c829caf7cee94ec21e2 # pins @master
with:
owner: firefly-iii
repo: data-importer