From f7d975ad0d17b1525fba6e471709ddb3eb44b989 Mon Sep 17 00:00:00 2001 From: mononaut Date: Fri, 5 Jun 2026 04:45:22 +0000 Subject: [PATCH] pin github workflow actions --- .github/workflows/backend-integration.yml | 8 +-- .github/workflows/ci.yml | 62 +++++++++---------- .../workflows/dependabot-provenance-check.yml | 6 +- .github/workflows/docker.yml | 20 +++--- .github/workflows/e2e_parameterized.yml | 34 +++++----- .../workflows/get_backend_block_height.yml | 2 +- .github/workflows/get_backend_hash.yml | 2 +- .github/workflows/get_image_digest.yml | 2 +- .github/workflows/project-review-status.yml | 2 +- .github/workflows/supply-chain-audit.yml | 8 +-- 10 files changed, 73 insertions(+), 73 deletions(-) diff --git a/.github/workflows/backend-integration.yml b/.github/workflows/backend-integration.yml index 0814e91ef..5fa94b43b 100644 --- a/.github/workflows/backend-integration.yml +++ b/.github/workflows/backend-integration.yml @@ -23,12 +23,12 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 with: path: ${{ matrix.node }}/integration - name: Setup Node - uses: actions/setup-node@v3 + uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3 with: node-version: ${{ matrix.node }} registry-url: "https://registry.npmjs.org" @@ -36,7 +36,7 @@ jobs: cache-dependency-path: '${{ matrix.node }}/integration/backend/package-lock.json' - name: Cache node modules - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: ${{ matrix.node }}/integration/backend/node_modules key: ${{ runner.os }}-backend-integration-node-${{ matrix.node }}-${{ hashFiles('${{ matrix.node }}/integration/backend/package-lock.json') }} @@ -50,7 +50,7 @@ jobs: working-directory: ${{ matrix.node }}/integration - name: Cache Rust dependencies - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | ~/.cargo/bin/ diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 468571f54..bb645fbd0 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -23,12 +23,12 @@ jobs: name: Backend (${{ matrix.flavor }}) - node ${{ matrix.node }} steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 with: path: ${{ matrix.node }}/${{ matrix.flavor }} - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: ${{ matrix.node }} registry-url: "https://registry.npmjs.org" @@ -39,7 +39,7 @@ jobs: run: npm install -g npm@11.12.0 - name: Cache node modules - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: ${{ matrix.node }}/${{ matrix.flavor }}/backend/node_modules key: ${{ runner.os }}-backend-${{ matrix.flavor }}-node-${{ matrix.node }}-${{ hashFiles('${{ matrix.node }}/${{ matrix.flavor }}/backend/package-lock.json') }} @@ -53,7 +53,7 @@ jobs: working-directory: ${{ matrix.node }}/${{ matrix.flavor }} - name: Cache Rust dependencies - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | ~/.cargo/bin/ @@ -106,12 +106,12 @@ jobs: runs-on: mempool-ci steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 with: path: assets - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: ${{ matrix.node }} registry-url: "https://registry.npmjs.org" @@ -122,7 +122,7 @@ jobs: run: npm install -g npm@11.12.0 - name: Cache node modules for frontend - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: assets/frontend/node_modules key: ${{ runner.os }}-cache-frontend-node-${{ matrix.node }}-${{ hashFiles('assets/frontend/package-lock.json') }} @@ -137,7 +137,7 @@ jobs: - name: Restore cached mining pool assets continue-on-error: true id: cache-mining-pool-restore - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | mining-pool-assets.zip @@ -146,7 +146,7 @@ jobs: - name: Restore promo video assets continue-on-error: true id: cache-promo-video-restore - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | promo-video-assets.zip @@ -179,20 +179,20 @@ jobs: run: zip -jrq promo-video-assets.zip assets/frontend/src/resources/promo-video/* - name: Upload mining pool assets as artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: mining-pool-assets path: mining-pool-assets.zip - name: Upload promo video assets as artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: promo-video-assets path: promo-video-assets.zip - name: Save mining pool assets cache id: cache-mining-pool-save - uses: actions/cache/save@v4 + uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | mining-pool-assets.zip @@ -200,7 +200,7 @@ jobs: - name: Save promo video assets cache id: cache-promo-video-save - uses: actions/cache/save@v4 + uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | promo-video-assets.zip @@ -219,12 +219,12 @@ jobs: name: Frontend (${{ matrix.flavor }}) - node ${{ matrix.node }} steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 with: path: ${{ matrix.node }}/${{ matrix.flavor }} - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: ${{ matrix.node }} registry-url: "https://registry.npmjs.org" @@ -235,7 +235,7 @@ jobs: run: npm install -g npm@11.12.0 - name: Cache node modules - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: ${{ matrix.node }}/${{ matrix.flavor }}/frontend/node_modules key: ${{ runner.os }}-frontend-${{ matrix.flavor }}-node-${{ matrix.node }}-${{ hashFiles('${{ matrix.node }}/${{ matrix.flavor }}/frontend/package-lock.json') }} @@ -264,7 +264,7 @@ jobs: - name: Restore cached mining pool assets continue-on-error: true id: cache-mining-pool-restore - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | mining-pool-assets.zip @@ -273,14 +273,14 @@ jobs: - name: Restore promo video assets continue-on-error: true id: cache-promo-video-restore - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | promo-video-assets.zip key: promo-video-assets-cache - name: Download artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: mining-pool-assets @@ -288,7 +288,7 @@ jobs: run: unzip -o mining-pool-assets.zip -d ${{ matrix.node }}/${{ matrix.flavor }}/frontend/src/resources/mining-pools - name: Download artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: promo-video-assets @@ -322,12 +322,12 @@ jobs: name: E2E tests for ${{ matrix.module }} steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 with: path: ${{ matrix.module }} - name: Setup node - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: ${{ matrix.node }} cache: "npm" @@ -337,7 +337,7 @@ jobs: run: npm install -g npm@11.12.0 - name: Cache node modules for e2e - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: ${{ matrix.module }}/frontend/node_modules key: ${{ runner.os }}-e2e-${{ matrix.module }}-node-${{ matrix.node }}-${{ hashFiles('${{ matrix.module }}/frontend/package-lock.json') }} @@ -348,7 +348,7 @@ jobs: - name: Restore cached mining pool assets continue-on-error: true id: cache-mining-pool-restore - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | mining-pool-assets.zip @@ -357,14 +357,14 @@ jobs: - name: Restore cached promo video assets continue-on-error: true id: cache-promo-video-restore - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | promo-video-assets.zip key: promo-video-assets-cache - name: Download artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: mining-pool-assets @@ -372,7 +372,7 @@ jobs: run: unzip -o mining-pool-assets.zip -d ${{ matrix.module }}/frontend/src/resources/mining-pools - name: Download artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: promo-video-assets @@ -382,7 +382,7 @@ jobs: # mempool - name: Chrome browser tests (${{ matrix.module }}) if: ${{ matrix.module == 'mempool' }} - uses: cypress-io/github-action@v5 + uses: cypress-io/github-action@248bde77443c376edc45906ede03a1aba9da0462 # v5 with: tag: ${{ github.event_name }} working-directory: ${{ matrix.module }}/frontend @@ -407,7 +407,7 @@ jobs: # liquid - name: Chrome browser tests (${{ matrix.module }}) if: ${{ matrix.module == 'liquid' }} - uses: cypress-io/github-action@v5 + uses: cypress-io/github-action@248bde77443c376edc45906ede03a1aba9da0462 # v5 with: tag: ${{ github.event_name }} working-directory: ${{ matrix.module }}/frontend @@ -432,7 +432,7 @@ jobs: # testnet - name: Chrome browser tests (${{ matrix.module }}) if: ${{ matrix.module == 'testnet4' }} - uses: cypress-io/github-action@v5 + uses: cypress-io/github-action@248bde77443c376edc45906ede03a1aba9da0462 # v5 with: tag: ${{ github.event_name }} working-directory: ${{ matrix.module }}/frontend @@ -460,7 +460,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 with: path: docker diff --git a/.github/workflows/dependabot-provenance-check.yml b/.github/workflows/dependabot-provenance-check.yml index 41fb2abd9..592f18859 100644 --- a/.github/workflows/dependabot-provenance-check.yml +++ b/.github/workflows/dependabot-provenance-check.yml @@ -18,17 +18,17 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Fetch Dependabot metadata id: metadata - uses: dependabot/fetch-metadata@v2 + uses: dependabot/fetch-metadata@21025c705c08248db411dc16f3619e6b5f9ea21a # v2 with: github-token: "${{ secrets.GITHUB_TOKEN }}" - name: Setup Node if: steps.metadata.outputs.package-ecosystem == 'npm_and_yarn' - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: "24.13.0" diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 83a115fe6..b20e88d6f 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -24,7 +24,7 @@ jobs: name: Test built Docker images steps: - name: Checkout project - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Add SHORT_SHA env property with commit short sha run: | @@ -59,7 +59,7 @@ jobs: run: docker/init.sh "$TAG" - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 - name: Build frontend image locally run: | @@ -288,13 +288,13 @@ jobs: - name: Login to Docker for building - uses: docker/login-action@v3 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - name: Checkout project - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 # For PRs: use package.json version + short sha as TAG - name: Set TAG from service package.json for pull requests @@ -319,13 +319,13 @@ jobs: run: docker/init.sh "$TAG" - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3 with: platforms: linux/amd64,linux/arm64 id: qemu - name: Setup Docker buildx action - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 with: platforms: linux/amd64,linux/arm64 driver-opts: | @@ -336,7 +336,7 @@ jobs: run: echo ${{ steps.buildx.outputs.platforms }} - name: Cache Docker layers - uses: actions/cache@v3 + uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3 id: cache with: path: /tmp/.buildx-cache @@ -375,19 +375,19 @@ jobs: run: echo "TAG=${GITHUB_REF/refs\/tags\//}" >> $GITHUB_ENV - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3 with: platforms: linux/amd64,linux/arm64 - name: Setup Docker buildx action - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 with: platforms: linux/amd64,linux/arm64 driver-opts: | network=host - name: Login to Docker Hub - uses: docker/login-action@v3 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} diff --git a/.github/workflows/e2e_parameterized.yml b/.github/workflows/e2e_parameterized.yml index e32f1c2fb..73a675018 100644 --- a/.github/workflows/e2e_parameterized.yml +++ b/.github/workflows/e2e_parameterized.yml @@ -38,13 +38,13 @@ jobs: fi - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 with: ref: ${{ steps.determine-ref.outputs.ref }} path: assets - name: Setup Node - uses: actions/setup-node@v3 + uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3 with: node-version: 24.13.0 registry-url: "https://registry.npmjs.org" @@ -56,7 +56,7 @@ jobs: - name: Restore cached mining pool assets continue-on-error: true id: cache-mining-pool-restore - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | mining-pool-assets.zip @@ -65,7 +65,7 @@ jobs: - name: Restore promo video assets continue-on-error: true id: cache-promo-video-restore - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | promo-video-assets.zip @@ -98,20 +98,20 @@ jobs: run: zip -jrq promo-video-assets.zip assets/frontend/src/resources/promo-video/* - name: Upload mining pool assets as artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: mining-pool-assets path: mining-pool-assets.zip - name: Upload promo video assets as artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: promo-video-assets path: promo-video-assets.zip - name: Save mining pool assets cache id: cache-mining-pool-save - uses: actions/cache/save@v4 + uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | mining-pool-assets.zip @@ -119,7 +119,7 @@ jobs: - name: Save promo video assets cache id: cache-promo-video-save - uses: actions/cache/save@v4 + uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | promo-video-assets.zip @@ -146,13 +146,13 @@ jobs: fi - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 with: ref: ${{ steps.determine-ref.outputs.ref }} path: ${{ matrix.module }} - name: Setup node - uses: actions/setup-node@v3 + uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3 with: node-version: 24.13.0 cache: "npm" @@ -161,7 +161,7 @@ jobs: - name: Restore cached mining pool assets continue-on-error: true id: cache-mining-pool-restore - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | mining-pool-assets.zip @@ -170,14 +170,14 @@ jobs: - name: Restore cached promo video assets continue-on-error: true id: cache-promo-video-restore - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | promo-video-assets.zip key: promo-video-assets-cache - name: Download artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: mining-pool-assets @@ -185,7 +185,7 @@ jobs: run: unzip -o mining-pool-assets.zip -d ${{ matrix.module }}/frontend/src/resources/mining-pools - name: Download artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: promo-video-assets @@ -195,7 +195,7 @@ jobs: # mempool - name: Chrome browser tests (${{ matrix.module }}) if: ${{ matrix.module == 'mempool' }} - uses: cypress-io/github-action@v5 + uses: cypress-io/github-action@248bde77443c376edc45906ede03a1aba9da0462 # v5 with: tag: ${{ github.event_name }} working-directory: ${{ matrix.module }}/frontend @@ -223,7 +223,7 @@ jobs: # liquid - name: Chrome browser tests (${{ matrix.module }}) if: ${{ matrix.module == 'liquid' }} - uses: cypress-io/github-action@v5 + uses: cypress-io/github-action@248bde77443c376edc45906ede03a1aba9da0462 # v5 with: tag: ${{ github.event_name }} working-directory: ${{ matrix.module }}/frontend @@ -251,7 +251,7 @@ jobs: # testnet - name: Chrome browser tests (${{ matrix.module }}) if: ${{ matrix.module == 'testnet4' }} - uses: cypress-io/github-action@v5 + uses: cypress-io/github-action@248bde77443c376edc45906ede03a1aba9da0462 # v5 with: tag: ${{ github.event_name }} working-directory: ${{ matrix.module }}/frontend diff --git a/.github/workflows/get_backend_block_height.yml b/.github/workflows/get_backend_block_height.yml index 90f712eee..70d85b20f 100644 --- a/.github/workflows/get_backend_block_height.yml +++ b/.github/workflows/get_backend_block_height.yml @@ -11,7 +11,7 @@ jobs: name: Get block height steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 with: path: repo diff --git a/.github/workflows/get_backend_hash.yml b/.github/workflows/get_backend_hash.yml index 947970362..ee0bc6696 100644 --- a/.github/workflows/get_backend_hash.yml +++ b/.github/workflows/get_backend_hash.yml @@ -11,7 +11,7 @@ jobs: name: Print backend hashes steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 with: path: repo diff --git a/.github/workflows/get_image_digest.yml b/.github/workflows/get_image_digest.yml index c8260f0a9..5c03c8d78 100644 --- a/.github/workflows/get_image_digest.yml +++ b/.github/workflows/get_image_digest.yml @@ -18,7 +18,7 @@ jobs: name: Print digest for images steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 with: path: digest diff --git a/.github/workflows/project-review-status.yml b/.github/workflows/project-review-status.yml index 4d01cd628..83be4de23 100644 --- a/.github/workflows/project-review-status.yml +++ b/.github/workflows/project-review-status.yml @@ -11,7 +11,7 @@ permissions: jobs: project-automation: - uses: mempool/.github/.github/workflows/project-board-automation.yml@master + uses: mempool/.github/.github/workflows/project-board-automation.yml@267e0f38846bfb8cf1b118798dfb12def19ccb35 # master with: project-number: 8 secrets: diff --git a/.github/workflows/supply-chain-audit.yml b/.github/workflows/supply-chain-audit.yml index 521c7c543..763e7d468 100644 --- a/.github/workflows/supply-chain-audit.yml +++ b/.github/workflows/supply-chain-audit.yml @@ -17,10 +17,10 @@ jobs: name: Backend install-script audit steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: "24.13.0" registry-url: "https://registry.npmjs.org" @@ -40,10 +40,10 @@ jobs: name: Frontend install-script audit steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: "24.13.0" registry-url: "https://registry.npmjs.org"