Lock down workflows

This commit is contained in:
Dan Harrin
2026-05-12 10:04:04 +01:00
parent 2f3999e057
commit 32ae49ddca
8 changed files with 148 additions and 82 deletions

View File

@@ -12,19 +12,21 @@ jobs:
runs-on: ubuntu-latest
steps:
# persist-credentials: true is required so `git-auto-commit-action` below
# can push the CHANGELOG update.
- name: Checkout code
uses: actions/checkout@v6
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # zizmor: ignore[artipacked]
with:
ref: main
- name: Update Changelog
uses: stefanzweifel/changelog-updater-action@v1
uses: stefanzweifel/changelog-updater-action@a938690fad7edf25368f37e43a1ed1b34303eb36 # v1.12.0
with:
latest-version: ${{ github.event.release.name }}
release-notes: ${{ github.event.release.body }}
- name: Commit updated CHANGELOG
uses: stefanzweifel/git-auto-commit-action@v7
uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7.1.0
with:
branch: main
commit_message: Update CHANGELOG