From fec3e8edc2ce42dfa1a311fdda4817358cdbf015 Mon Sep 17 00:00:00 2001 From: Art Morozov Date: Wed, 7 Oct 2026 15:34:33 -0400 Subject: [PATCH] chore(DATAGO-154079): pin actions and fix unpinned nested action dependencies Re-points actions so every action reachable from these workflows is pinned to a full-length commit SHA, including actions nested inside composite actions and reusable workflows (org SHA-pin policy). --- .github/workflows/site-update.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/site-update.yml b/.github/workflows/site-update.yml index cd557762..cc52873f 100644 --- a/.github/workflows/site-update.yml +++ b/.github/workflows/site-update.yml @@ -19,7 +19,7 @@ jobs: path: site - name: Install SSH key - uses: shimataro/ssh-key-action@v2 + uses: shimataro/ssh-key-action@87a8f067114a8ce263df83e9ed5c849953548bc3 # v2 with: key: ${{ secrets.SSH_KEY }} known_hosts: ${{ secrets.KNOWN_HOSTS }}