Build/Test Tools: Pin full commit SHA for rhysd/actionlint.

This is a recommended best practice for hardening workflows that are utilizing 3rd party actions.

Follow up to [59679].

Props johnbillion.
See #62221.

git-svn-id: https://develop.svn.wordpress.org/trunk@60050 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Jonathan Desrosiers 2025-03-19 12:16:28 +00:00
parent a18719e7ea
commit a728957ae2

View File

@ -29,6 +29,6 @@ jobs:
# actionlint is static checker for GitHub Actions workflow files.
# See https://github.com/rhysd/actionlint.
- name: Run actionlint
uses: docker://rhysd/actionlint:1.7.7
uses: docker://rhysd/actionlint@sha256:887a259a5a534f3c4f36cb02dca341673c6089431057242cdc931e9f133147e9 # v1.7.7
with:
args: "-color -verbose"