From e15cd01149afe4924460f81cb6e27dd96de06657 Mon Sep 17 00:00:00 2001 From: StepSecurity Bot Date: Fri, 25 Nov 2022 10:26:10 +0000 Subject: [StepSecurity] ci: Harden GitHub Actions Signed-off-by: StepSecurity Bot --- .github/workflows/spec_guards.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to '.github/workflows/spec_guards.yml') diff --git a/.github/workflows/spec_guards.yml b/.github/workflows/spec_guards.yml index 1991e016a3..41c7d5badf 100644 --- a/.github/workflows/spec_guards.yml +++ b/.github/workflows/spec_guards.yml @@ -28,8 +28,8 @@ jobs: - ruby-3.1 steps: - - uses: actions/checkout@v3 - - uses: ruby/setup-ruby@v1 + - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0 + - uses: ruby/setup-ruby@de6f5b9c340068d049670c6b6ae8dc94cff4667a # v1.125.0 with: ruby-version: ${{ matrix.ruby }} bundler: none @@ -38,7 +38,7 @@ jobs: working-directory: spec/ruby env: CHECK_LEAKS: true - - uses: ruby/action-slack@v3.0.0 + - uses: ruby/action-slack@b6882ea6ef8f556f9f9af9ec1220d3f1ced74acf # v3.0.0 with: payload: | { -- cgit v1.2.3