Pin third-party workflows to hashes

budgeapp · Jan 9, 2025 · 4ca58ef · 4ca58ef
1 parent bf124d5
commit 4ca58ef
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
-      - uses: astral-sh/setup-uv@v5
+      - uses: astral-sh/setup-uv@887a942a15af3a7626099df99e897a18d9e5ab3a
         with:
           enable-cache: true
       - uses: actions/setup-python@v5
@@ -43,7 +43,7 @@ jobs:
         with:
           name: python-package-distributions
           path: dist/
-      - uses: pypa/gh-action-pypi-publish@release/v1
+      - uses: pypa/gh-action-pypi-publish@67339c736fd9354cd4f8cb0b744f2b82a74b5c70
 
   github-release:
     runs-on: ubuntu-latest
@@ -62,7 +62,7 @@ jobs:
         with:
           name: python-package-distributions
           path: dist/
-      - uses: sigstore/gh-action-sigstore-python@v3.0.0
+      - uses: sigstore/gh-action-sigstore-python@f514d46b907ebcd5bedc05145c03b69c1edd8b46
         with:
           inputs: >-
             ./dist/*.whl

diff --git a/.github/workflows/pytest.yml b/.github/workflows/pytest.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
-      - uses: astral-sh/setup-uv@v5
+      - uses: astral-sh/setup-uv@887a942a15af3a7626099df99e897a18d9e5ab3a
         with:
           enable-cache: true
       - uses: actions/setup-python@v5