From c2bb2414a3157c929318289919712a6435a8e82b Mon Sep 17 00:00:00 2001 From: Thomas Weber Date: Tue, 24 Dec 2024 20:07:31 -0600 Subject: [PATCH] Update workflows based on zizmor audit --- .github/workflows/deploy.yml | 10 ++++++---- .github/workflows/validate.yml | 6 ++++-- 2 files changed, 10 insertions(+), 6 deletions(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 7d92837..280d57b 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -13,9 +13,11 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 + with: + persist-credentials: false - name: Install Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af with: node-version: 20 cache: npm @@ -24,7 +26,7 @@ jobs: - name: Build documentation run: npm run build - name: Upload artifact - uses: actions/upload-pages-artifact@v3 + uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa with: path: ./docs/ @@ -40,4 +42,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v4 + uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index b18f03e..888868b 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -9,9 +9,11 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 + with: + persist-credentials: false - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af with: node-version: 20 cache: npm