From 6534d9ed38c010984e47011e2db2ad2f584bab49 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Florian=20Str=C3=BCbe?= Date: Fri, 16 Oct 2026 20:50:12 +0200 Subject: [PATCH] ci: pin internal actions to their releases (FB-4904) Replace @ # main pins of firebolt-db actions with the commit of their release tag. Includes the action-python-release and action-generate-version releases that stop commit subjects from being executed during a release. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/release.yml | 2 +- .github/workflows/security-scan.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 9b92038ce96..a8616936726 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -46,7 +46,7 @@ jobs: persist-credentials: true # The release action pushes the version commit and tag. - name: 'Publish action' - uses: firebolt-db/action-python-release@535d72bf4fb7ff9ff7f87bb0454e232afe1cef91 # main + uses: firebolt-db/action-python-release@4df4861ff745d6e2bbc602b2e8d6578d4f8dcf61 # v1.0.0 with: pre-release-tag: ${{ inputs.pre-release-tag }} major-release: ${{ inputs.major-release }} diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml index 8ce4ea1dcff..336a18ddce6 100644 --- a/.github/workflows/security-scan.yml +++ b/.github/workflows/security-scan.yml @@ -29,7 +29,7 @@ jobs: name: pytest-coverage-report - name: "Security Scan" - uses: firebolt-db/action-security-scan@83d65487985b5e0e967362900c665ced1e8d0dbf # main + uses: firebolt-db/action-security-scan@43e78eff2e3313515c49b6c710ea0ae8a0bfb86a # v1.0.0 with: github-key: ${{ secrets.GITHUB_TOKEN }} fossa-key: ${{ secrets.FOSSA_TOKEN }}