commit 69bd019f0f97968e31b470a4634fb9ac4459352a parent 60f391feab7ec65bb942b0d13edcd7c8a7a38d19 Author: mtmn <miro@haravara.org> Date: Sat, 18 Apr 2026 22:52:25 +0200 ci: pin versions; init pinact Diffstat:
| M | .github/workflows/test.yml | | | 6 | +++--- |
| A | .pinact.yaml | | | 14 | ++++++++++++++ |
2 files changed, 17 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml @@ -5,9 +5,9 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: '22' cache: npm @@ -16,7 +16,7 @@ jobs: run: npm ci - name: Cache spago packages - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: ~/.cache/spago key: spago-${{ hashFiles('spago.lock') }} diff --git a/.pinact.yaml b/.pinact.yaml @@ -0,0 +1,14 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/suzuki-shunsuke/pinact/refs/heads/main/json-schema/pinact.json +# pinact - https://github.com/suzuki-shunsuke/pinact +version: 3 +# files: +# - pattern: action.yaml +# - pattern: */action.yaml + +ignore_actions: +# - name: slsa-framework/slsa-github-generator/\.github/workflows/generator_generic_slsa3\.yml +# ref: v\d+\.\d+\.\d+ +# - name: actions/.* +# ref: main +# - name: suzuki-shunsuke/.* +# ref: release-.*