ci(actions): Pin commit for sync-branches action for security reasons

mixxxdj · Oct 14, 2024 · 519d969 · 519d969
1 parent cccd490
commit 519d969
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/sync_branches.yml b/.github/workflows/sync_branches.yml
@@ -19,7 +19,8 @@ jobs:
     steps:
       - name: Merge ${{ matrix.from_branch }} into ${{ matrix.to_branch }}
         if: github.event_name == 'workflow_dispatch' || github.ref_name == matrix.from_branch
-        uses: tretuna/[email protected]
+        # Commit is pinned due to low popularity of the action repo.
+        uses: tretuna/sync-branches@ea58ab6e406fd3ad016a064b31270bbb41127f41
         with:
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
           FROM_BRANCH: ${{ matrix.from_branch }}