From 4179b156606771c69c28110dbb2ee5885b0f5465 Mon Sep 17 00:00:00 2001 From: Abdel Ghanem Date: Fri, 10 Jul 2026 18:53:33 -0300 Subject: [PATCH 1/3] fix: pin GitHub Actions to commit SHAs (#9108) --- .github/workflows/feature-deployment.yml | 6 +++--- .github/workflows/pull-request-build-lint-api.yml | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/feature-deployment.yml b/.github/workflows/feature-deployment.yml index f7ade5e169d..0ca5e5e9e04 100644 --- a/.github/workflows/feature-deployment.yml +++ b/.github/workflows/feature-deployment.yml @@ -58,7 +58,7 @@ jobs: - id: checkout_files name: Checkout Files - uses: actions/checkout@v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 full_build_push: runs-on: ubuntu-22.04 @@ -86,7 +86,7 @@ jobs: endpoint: ${{ env.BUILDX_ENDPOINT }} - name: Check out the repo - uses: actions/checkout@v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 - name: Build and Push to Docker Hub uses: docker/build-push-action@v7.0.0 @@ -122,7 +122,7 @@ jobs: sudo apt-get install -y python3-pip pip3 install awscli - name: Tailscale - uses: tailscale/github-action@v4 + uses: tailscale/github-action@v306e68a486fd2350f2bfc3b19fcd143891a4a2d8 with: oauth-client-id: ${{ secrets.TAILSCALE_OAUTH_CLIENT_ID }} oauth-secret: ${{ secrets.TAILSCALE_OAUTH_SECRET }} diff --git a/.github/workflows/pull-request-build-lint-api.yml b/.github/workflows/pull-request-build-lint-api.yml index 28a623f8e2b..a02188de769 100644 --- a/.github/workflows/pull-request-build-lint-api.yml +++ b/.github/workflows/pull-request-build-lint-api.yml @@ -27,9 +27,9 @@ jobs: github.event.pull_request.draft == false && github.event.pull_request.requested_reviewers != null steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 - name: Set up Python - uses: actions/setup-python@v6 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 with: python-version: "3.12.x" cache: 'pip' From 984bd6750cb3130751ca5ebfb4b67170904cbaea Mon Sep 17 00:00:00 2001 From: AbdelHamdyGhanem Date: Fri, 10 Jul 2026 19:04:40 -0300 Subject: [PATCH 2/3] Update feature-deployment.yml --- .github/workflows/feature-deployment.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/feature-deployment.yml b/.github/workflows/feature-deployment.yml index 0ca5e5e9e04..330f4e8ab19 100644 --- a/.github/workflows/feature-deployment.yml +++ b/.github/workflows/feature-deployment.yml @@ -122,7 +122,7 @@ jobs: sudo apt-get install -y python3-pip pip3 install awscli - name: Tailscale - uses: tailscale/github-action@v306e68a486fd2350f2bfc3b19fcd143891a4a2d8 + uses: tailscale/github-action@306e68a486fd2350f2bfc3b19fcd143891a4a2d8 with: oauth-client-id: ${{ secrets.TAILSCALE_OAUTH_CLIENT_ID }} oauth-secret: ${{ secrets.TAILSCALE_OAUTH_SECRET }} From bcf2c296f3509812ffba85749e1d5db7c8909b7c Mon Sep 17 00:00:00 2001 From: AbdelHamdyGhanem Date: Fri, 10 Jul 2026 19:05:31 -0300 Subject: [PATCH 3/3] Update pull-request-build-lint-api.yml --- .github/workflows/pull-request-build-lint-api.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pull-request-build-lint-api.yml b/.github/workflows/pull-request-build-lint-api.yml index a02188de769..e315307d2fe 100644 --- a/.github/workflows/pull-request-build-lint-api.yml +++ b/.github/workflows/pull-request-build-lint-api.yml @@ -29,7 +29,7 @@ jobs: steps: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 - name: Set up Python - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 with: python-version: "3.12.x" cache: 'pip'