From eb5d24fe738f07df16882e74242a71c44ea98a78 Mon Sep 17 00:00:00 2001 From: Mark Siebert Date: Thu, 9 Apr 2026 15:03:45 -0700 Subject: [PATCH] fix: Pin GitHub Actions to commit SHAs in OpenFeature release workflow Co-Authored-By: Claude Opus 4.6 --- .github/workflows/release-openfeature.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release-openfeature.yml b/.github/workflows/release-openfeature.yml index 5932285..885969b 100644 --- a/.github/workflows/release-openfeature.yml +++ b/.github/workflows/release-openfeature.yml @@ -16,16 +16,16 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Set up JDK 8 - uses: actions/setup-java@v4 + uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4 with: java-version: '8' distribution: 'temurin' - name: Cache Maven dependencies - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: ~/.m2/repository key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}