chore: pin release workflow to SHA for supply chain safety (#267)
Some checks failed
CodeQL Advanced / Analyze (javascript-typescript) (push) Has been cancelled
Integration test for setup-kubectl / Validate release and master branch (push) Has been cancelled
Run prettify / Prettier Check (push) Has been cancelled
Run unit tests. / build (push) Has been cancelled

Pin Azure/action-release-workflows to commit SHA instead of mutable v1 tag.
This commit is contained in:
David Gamero 2026-05-26 17:20:50 -04:00 committed by GitHub
parent 4f39f383be
commit f295d40337
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -13,6 +13,6 @@ jobs:
permissions:
actions: read
contents: write
uses: Azure/action-release-workflows/.github/workflows/release_js_project.yaml@v1
uses: Azure/action-release-workflows/.github/workflows/release_js_project.yaml@3c677ba5ab58f5c5c1a6f0cfb176b333b1f27405 # v1
with:
changelogPath: ./CHANGELOG.md