From 4a0fb2fc0667050cd0b09e087573228c1420b2bc Mon Sep 17 00:00:00 2001 From: Saadi Myftija Date: Mon, 2 Mar 2026 10:35:42 +0100 Subject: [PATCH] ci: pin vouch action version (#3160) Pins vouch actions to `c6d80ead49839655b61b422700b7a3bc9d0804a9` (v1.4.2) in favor of security practices. We were previously using the `@main` tag. Also removes the checkout steps as they're not needed in these workflows. --- .github/workflows/vouch-check-pr.yml | 3 +-- .github/workflows/vouch-manage-by-issue.yml | 3 +-- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/workflows/vouch-check-pr.yml b/.github/workflows/vouch-check-pr.yml index a2f4c6d1b..b9aadd5e0 100644 --- a/.github/workflows/vouch-check-pr.yml +++ b/.github/workflows/vouch-check-pr.yml @@ -13,8 +13,7 @@ jobs: check-pr: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: mitchellh/vouch/action/check-pr@main + - uses: mitchellh/vouch/action/check-pr@c6d80ead49839655b61b422700b7a3bc9d0804a9 # v1.4.2 with: pr-number: ${{ github.event.pull_request.number }} auto-close: true diff --git a/.github/workflows/vouch-manage-by-issue.yml b/.github/workflows/vouch-manage-by-issue.yml index 36de05575..51bce367b 100644 --- a/.github/workflows/vouch-manage-by-issue.yml +++ b/.github/workflows/vouch-manage-by-issue.yml @@ -16,8 +16,7 @@ jobs: contains(github.event.comment.body, 'denounce') || contains(github.event.comment.body, 'unvouch') steps: - - uses: actions/checkout@v4 - - uses: mitchellh/vouch/action/manage-by-issue@main + - uses: mitchellh/vouch/action/manage-by-issue@c6d80ead49839655b61b422700b7a3bc9d0804a9 # v1.4.2 with: comment-id: ${{ github.event.comment.id }} issue-id: ${{ github.event.issue.number }}