mirror of
https://github.com/shirou/gopsutil.git
synced 2025-05-02 22:17:08 +08:00
Ref actions by commit SHA in release.yml
It's important to make sure the SHA's are from the original repositories and not forks.
For reference:
https://github.com/actions/checkout/releases/tag/v3.5.2
8e5e7e5ab8
Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com>
This commit is contained in:
parent
0f90ed4833
commit
f6afa2b95f
2
.github/workflows/release.yml
vendored
2
.github/workflows/release.yml
vendored
@ -10,6 +10,6 @@ jobs:
|
|||||||
release:
|
release:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v3
|
- uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
|
||||||
- name: Release
|
- name: Release
|
||||||
run: make release
|
run: make release
|
||||||
|
Loading…
x
Reference in New Issue
Block a user