git.ipfire.org Git - thirdparty/kmod.git/commit

author	Emil Velikov <emil.l.velikov@gmail.com>
	Fri, 16 Aug 2024 15:19:38 +0000 (16:19 +0100)
committer	Lucas De Marchi <lucas.de.marchi@gmail.com>
	Fri, 16 Aug 2024 22:05:43 +0000 (17:05 -0500)
commit	93b7f746b3b6f67ce7b1fe54898408d8c1d2b116
tree	f382b15dac5c2ff93563eb9ff4e46f8b20b63ae6	tree
parent	e21275d8e5ebf9220a4aa09f0d2bb3c38f2e9ed9	commit \| diff

ci: use hash-pinned workflow actions, update checkout

The tags are mutable and groups like Google Open Source Security Team
(GOSST) are suggesting use of hash-pinned (alongside the tag as comment)
actions.

The dependabot just introduced, can handle the format automatically.

Ref: https://github.com/libarchive/libarchive/issues/1959
Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
Link: https://github.com/kmod-project/kmod/pull/76
Signed-off-by: Lucas De Marchi <lucas.de.marchi@gmail.com>

.github/workflows/codespell.yml		diff \| blob \| blame \| history
.github/workflows/main.yml		diff \| blob \| blame \| history