From 5f627453cd1704a45df6fbb95a5c896cf9799fe9 Mon Sep 17 00:00:00 2001 From: Rishi Tank Date: Fri, 9 Oct 2026 02:30:24 +0100 Subject: [PATCH] ci: pin the shared reusable workflows to the v1 commit Follow-up to #11, addressing its two open CodeRabbit threads: ci.yml (node-ci), security.yml and workflows-lint.yml called rishitank/.github at the mutable `@v1` tag. Pin all three to 5c644123ed93759cf78aa32d9d119150910e113e, the commit v1 resolves to, with a `# v1` comment. The house Renovate preset (helpers:pinGitHubActionDigests) keeps the digest current, so tag moves still arrive, as reviewed PRs. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_012rYJxu978iUSGFZ1UuqTsi --- .github/workflows/ci.yml | 2 +- .github/workflows/security.yml | 2 +- .github/workflows/workflows-lint.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e9b9105..d17b25b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -19,7 +19,7 @@ permissions: jobs: test: - uses: rishitank/.github/.github/workflows/node-ci.yml@v1 + uses: rishitank/.github/.github/workflows/node-ci.yml@5c644123ed93759cf78aa32d9d119150910e113e # v1 with: lint: "" typecheck: "" diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 6a603b0..dc3945b 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -19,7 +19,7 @@ permissions: jobs: security: - uses: rishitank/.github/.github/workflows/security.yml@v1 + uses: rishitank/.github/.github/workflows/security.yml@5c644123ed93759cf78aa32d9d119150910e113e # v1 with: ecosystem: node # osv-scanner scans package-lock.json; the audit's setup-node reads diff --git a/.github/workflows/workflows-lint.yml b/.github/workflows/workflows-lint.yml index f927d2f..bcba506 100644 --- a/.github/workflows/workflows-lint.yml +++ b/.github/workflows/workflows-lint.yml @@ -15,4 +15,4 @@ permissions: jobs: actionlint: - uses: rishitank/.github/.github/workflows/workflows-lint.yml@v1 + uses: rishitank/.github/.github/workflows/workflows-lint.yml@5c644123ed93759cf78aa32d9d119150910e113e # v1