Pin dependencies

pagopa · Jan 27, 2025 · 200fdef · 200fdef
1 parent 37373bc
commit 200fdef
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/.github/workflows/bump-release.yaml b/.github/workflows/bump-release.yaml
@@ -27,12 +27,12 @@ jobs:
           echo "semver: ${{ inputs.semver }}" 
         shell: bash
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
           node-version-file: ".node-version"
 

diff --git a/.github/workflows/publish-to-package-registry.yaml b/.github/workflows/publish-to-package-registry.yaml
@@ -17,8 +17,8 @@ jobs:
       contents: write
       packages: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
         with:
           registry-url: 'https://registry.npmjs.org'
           node-version-file: ".node-version"
@@ -38,7 +38,7 @@ jobs:
           fi
         shell: bash
       - name: Create Release tag
-        uses: ncipollo/[email protected]
+        uses: ncipollo/release-action@a2e71bdd4e7dab70ca26a852f29600c98b33153e # v1.12.0
         with:
           commit: ${{ github.ref_name }}
           tag: ${{ env.new_version }}