build: pin internal GitHub actions via full-length commit SHA

Planeshifter · Planeshifter · commit 26983b7c4d61 · 2024-01-07T19:48:39.000-05:00
diff --git a/.github/workflows/discussion_bot_response.yml b/.github/workflows/discussion_bot_response.yml
@@ -48,7 +48,8 @@ jobs:
     steps:
       # Run the chatbot action:
       - name: 'Run chatbot action'
-        uses: stdlib-js/stdlib-chat-bot@main
+        # Pin action to full length commit SHA
+        uses: stdlib-js/stdlib-chat-bot@6c0643a5a1eb3c782b2df3bfd11e836d2ac7268e # v0.0.1
         with:
           OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
           GITHUB_TOKEN: ${{ secrets.CHATBOT_GITHUB_TOKEN }}
diff --git a/.github/workflows/discussion_comment_bot_response.yml b/.github/workflows/discussion_comment_bot_response.yml
@@ -48,7 +48,8 @@ jobs:
     steps:
       # Run the chatbot action:
       - name: 'Run chatbot action'
-        uses: stdlib-js/stdlib-chat-bot@main
+        # Pin action to full length commit SHA
+        uses: stdlib-js/stdlib-chat-bot@6c0643a5a1eb3c782b2df3bfd11e836d2ac7268e # v0.0.1
         with:
           OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
           GITHUB_TOKEN: ${{ secrets.CHATBOT_GITHUB_TOKEN }}
diff --git a/.github/workflows/markdown_src_attributes.yml b/.github/workflows/markdown_src_attributes.yml
@@ -85,7 +85,8 @@ jobs:
 
       # Check for broken `src` attribute URLs:
       - name: 'Check `src` attribute URLs'
-        uses: stdlib-js/check-markdown-src-action@main
+        # Pin action to full length commit SHA
+        uses: stdlib-js/check-markdown-src-action@9d9c0883b8c06a04576a146e480ef7937c51cdbf # v2.0.1
         id: results
         with:
           exclude: /path/to/
diff --git a/.github/workflows/scaffold_pkg_via_branch_push.yml b/.github/workflows/scaffold_pkg_via_branch_push.yml
@@ -75,7 +75,8 @@ jobs:
       # Run the command to scaffold a package:
       - name: 'Scaffold package'
         id: scaffold
-        uses: stdlib-js/scaffold-pkg-pr-action@main
+        # Pin action to full length commit SHA
+        uses: stdlib-js/scaffold-pkg-pr-action@882ef0cbb70c1fb76135b9620232606686c1cb10 # v0.0.1
         with:
           OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/scaffold_pkg_via_issue_comment.yml b/.github/workflows/scaffold_pkg_via_issue_comment.yml
@@ -58,7 +58,8 @@ jobs:
       - name: 'Scaffold package'
         if: ${{ contains(github.event.comment.body, 'scaffold') }}
         id: scaffold
-        uses: stdlib-js/scaffold-pkg-pr-action@main
+        # Pin action to full length commit SHA
+        uses: stdlib-js/scaffold-pkg-pr-action@882ef0cbb70c1fb76135b9620232606686c1cb10 # v0.0.1
         with:
           OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/scaffold_pkg_via_pull_request_assignment.yml b/.github/workflows/scaffold_pkg_via_pull_request_assignment.yml
@@ -149,7 +149,8 @@ jobs:
       # Run the command to scaffold a package:
       - name: 'Scaffold package'
         id: scaffold
-        uses: stdlib-js/scaffold-pkg-pr-action@main
+        # Pin action to full length commit SHA
+        uses: stdlib-js/scaffold-pkg-pr-action@882ef0cbb70c1fb76135b9620232606686c1cb10 # v0.0.1
         with:
           OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -244,7 +245,8 @@ jobs:
       # Run the command to scaffold a package:
       - name: 'Scaffold package'
         id: scaffold
-        uses: stdlib-js/scaffold-pkg-pr-action@main
+        # Pin action to full length commit SHA
+        uses: stdlib-js/scaffold-pkg-pr-action@882ef0cbb70c1fb76135b9620232606686c1cb10 # v0.0.1
         with:
           OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
