From 80a4a73437c9d7054aade8782c600f7f85b3ebf9 Mon Sep 17 00:00:00 2001 From: Dan Fiedler Date: Fri, 21 Aug 2026 15:19:44 -0400 Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs --- .github/dependabot.yml | 4 +++- .github/workflows/azure-dev.yml | 4 ++-- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 4ac76b4..00946b1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -16,6 +16,8 @@ updates: all-actions: patterns: - "*" + cooldown: + default-days: 7 # Python pip dependencies (backend) - package-ecosystem: "pip" @@ -41,4 +43,4 @@ updates: groups: npm-deps: patterns: - - "*" + - "*" \ No newline at end of file diff --git a/.github/workflows/azure-dev.yml b/.github/workflows/azure-dev.yml index 71393c9..9db53db 100644 --- a/.github/workflows/azure-dev.yml +++ b/.github/workflows/azure-dev.yml @@ -15,11 +15,11 @@ jobs: steps: # Step 1: Checkout the code from your repository - name: Checkout code - uses: actions/checkout@v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 # Step 2: Validate the Azure template using microsoft/template-validation-action - name: Validate Azure Template - uses: microsoft/template-validation-action@bae4895d0a8abd4f0d5aad68ae8647b3027f4c91 + uses: microsoft/template-validation-action@bae4895d0a8abd4f0d5aad68ae8647b3027f4c91 # v0.4.4 with: validateAzd: false useDevContainer: false