From e8a8e22f4ff45c357adb9ad19ad5754d49237adb Mon Sep 17 00:00:00 2001 From: Dan Fiedler Date: Sun, 23 Aug 2026 13:49:55 -0400 Subject: [PATCH 1/2] Pin GitHub Actions to full-length commit SHAs --- .github/dependabot.yml | 2 ++ .github/workflows/CI.yml | 4 ++-- .github/workflows/detailed-tests.yml | 2 +- .github/workflows/powershell.yml | 6 +++--- 4 files changed, 8 insertions(+), 6 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c923fc4..08d9899 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -8,3 +8,5 @@ updates: directory: "/" schedule: interval: "daily" + cooldown: + default-days: 7 \ No newline at end of file diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml index 20d8868..b42e7d9 100644 --- a/.github/workflows/CI.yml +++ b/.github/workflows/CI.yml @@ -16,7 +16,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Restore run: tools/restore.ps1 @@ -30,7 +30,7 @@ jobs: runs-on: windows-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Restore run: tools/restore.ps1 diff --git a/.github/workflows/detailed-tests.yml b/.github/workflows/detailed-tests.yml index 977f398..fe109a6 100644 --- a/.github/workflows/detailed-tests.yml +++ b/.github/workflows/detailed-tests.yml @@ -23,7 +23,7 @@ jobs: - {pwsh: 6.0.4, ubuntu: 16.04} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Build the Docker image run: | export VERSION=${{ matrix.versions.pwsh }} diff --git a/.github/workflows/powershell.yml b/.github/workflows/powershell.yml index 42d34ba..b1d7af5 100644 --- a/.github/workflows/powershell.yml +++ b/.github/workflows/powershell.yml @@ -19,10 +19,10 @@ jobs: name: PSScriptAnalyzer runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Run PSScriptAnalyzer - uses: microsoft/psscriptanalyzer-action@6b2948b1944407914a58661c49941824d149734f + uses: microsoft/psscriptanalyzer-action@6b2948b1944407914a58661c49941824d149734f # v1.1 with: # Check https://github.com/microsoft/action-psscriptanalyzer for more info about the options. # The below set up runs PSScriptAnalyzer to your entire repository and runs some basic security rules. @@ -34,6 +34,6 @@ jobs: # Upload the SARIF file generated in the previous step - name: Upload SARIF results file - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@42947a340483f03ba47bb1a039b2c519aab3df85 # v3.37.8 with: sarif_file: results.sarif From 50d794bdf6d9722404e33410144f206ddc4bc105 Mon Sep 17 00:00:00 2001 From: Andrea Spadaccini Date: Mon, 26 Oct 2026 17:37:59 +0100 Subject: [PATCH 2/2] Add space to trigger disabled CI jobs --- .github/workflows/powershell.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/powershell.yml b/.github/workflows/powershell.yml index b1d7af5..0fa2af4 100644 --- a/.github/workflows/powershell.yml +++ b/.github/workflows/powershell.yml @@ -19,7 +19,7 @@ jobs: name: PSScriptAnalyzer runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Run PSScriptAnalyzer uses: microsoft/psscriptanalyzer-action@6b2948b1944407914a58661c49941824d149734f # v1.1