Pin GitHub Actions to commit SHAs

2026-05-09 16:42:43 +00:00 · 2026-05-06 18:43:58 +00:00
4 changed files with 4 additions and 4 deletions
--- a/.github/workflows/auto-close-duplicates.yml
+++ b/.github/workflows/auto-close-duplicates.yml
@@ -18,7 +18,7 @@ jobs:
        uses: actions/checkout@v4
      - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 (sha-pinned)
        with:
          bun-version: latest
--- a/.github/workflows/backfill-duplicate-comments.yml
+++ b/.github/workflows/backfill-duplicate-comments.yml
@@ -32,7 +32,7 @@ jobs:
        uses: actions/checkout@v4
      - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 (sha-pinned)
        with:
          bun-version: latest
--- a/.github/workflows/issue-lifecycle-comment.yml
+++ b/.github/workflows/issue-lifecycle-comment.yml
@@ -15,7 +15,7 @@ jobs:
        uses: actions/checkout@v4
      - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 (sha-pinned)
        with:
          bun-version: latest
--- a/.github/workflows/sweep.yml
+++ b/.github/workflows/sweep.yml
@@ -19,7 +19,7 @@ jobs:
        uses: actions/checkout@v4
      - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 (sha-pinned)
        with:
          bun-version: latest