From b44680dc47d3ad9806d4be015a1f183931239b5b Mon Sep 17 00:00:00 2001 From: Igor Beylin Date: Sat, 19 Sep 2026 23:18:40 -0400 Subject: [PATCH] fix(ci): SHA-pin Core reusable workflows previously at @v2 Issue-Remediation-Cycle: Quantum-L9/.github#112/cycle-1 Co-authored-by: Cursor --- .github/workflows/l9-governance.yml | 2 +- .github/workflows/l9-pre-commit.yml | 2 +- .github/workflows/l9-sbom.yml | 2 +- .github/workflows/l9-scorecard.yml | 2 +- .github/workflows/l9-security.yml | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/l9-governance.yml b/.github/workflows/l9-governance.yml index 43c77b6..57fc2f4 100644 --- a/.github/workflows/l9-governance.yml +++ b/.github/workflows/l9-governance.yml @@ -7,6 +7,6 @@ on: jobs: l9_governance: - uses: Quantum-L9/l9-ci-core/.github/workflows/trio-governance.yml@v2 + uses: Quantum-L9/l9-ci-core/.github/workflows/trio-governance.yml@450f6ec753435365c6e4212cc898ee9ba560bb7d # v2 with: src-directory: "src" diff --git a/.github/workflows/l9-pre-commit.yml b/.github/workflows/l9-pre-commit.yml index 861f0c9..1ec7899 100644 --- a/.github/workflows/l9-pre-commit.yml +++ b/.github/workflows/l9-pre-commit.yml @@ -7,6 +7,6 @@ on: jobs: l9_pre_commit: - uses: Quantum-L9/l9-ci-core/.github/workflows/pre-commit-ci.yml@v2 + uses: Quantum-L9/l9-ci-core/.github/workflows/pre-commit-ci.yml@450f6ec753435365c6e4212cc898ee9ba560bb7d # v2 with: python-version: "3.12" diff --git a/.github/workflows/l9-sbom.yml b/.github/workflows/l9-sbom.yml index 6b1449c..54cfef7 100644 --- a/.github/workflows/l9-sbom.yml +++ b/.github/workflows/l9-sbom.yml @@ -7,4 +7,4 @@ on: jobs: l9_sbom: - uses: Quantum-L9/l9-ci-core/.github/workflows/sbom.yml@v2 + uses: Quantum-L9/l9-ci-core/.github/workflows/sbom.yml@450f6ec753435365c6e4212cc898ee9ba560bb7d # v2 diff --git a/.github/workflows/l9-scorecard.yml b/.github/workflows/l9-scorecard.yml index 749f0cd..96c8687 100644 --- a/.github/workflows/l9-scorecard.yml +++ b/.github/workflows/l9-scorecard.yml @@ -10,4 +10,4 @@ on: jobs: l9_scorecard: - uses: Quantum-L9/l9-ci-core/.github/workflows/scorecard.yml@v2 + uses: Quantum-L9/l9-ci-core/.github/workflows/scorecard.yml@450f6ec753435365c6e4212cc898ee9ba560bb7d # v2 diff --git a/.github/workflows/l9-security.yml b/.github/workflows/l9-security.yml index 71e096d..2f0bd18 100644 --- a/.github/workflows/l9-security.yml +++ b/.github/workflows/l9-security.yml @@ -9,7 +9,7 @@ on: jobs: l9_security: - uses: Quantum-L9/l9-ci-core/.github/workflows/security.yml@v2 + uses: Quantum-L9/l9-ci-core/.github/workflows/security.yml@450f6ec753435365c6e4212cc898ee9ba560bb7d # v2 with: python-version: "3.12" run-npm-audit: false