Pin GitHub Actions refs in composite actions

2026-11-11 21:10:39 +00:00 · 2026-04-08 13:00:59 -05:00
parent 036568ca78
commit bc8c5da9ba
3 changed files with 6 additions and 6 deletions
@@ -12,7 +12,7 @@ runs:
  using: composite
  steps:
    - name: Install cosign
-      uses: sigstore/cosign-installer@v3.7.0
+      uses: sigstore/cosign-installer@1aa8e0f2454b781fbf0fbf306a4c9533a0c57409 # v3.7.0

    - name: Cosign Linux artifacts
      shell: bash