From 552e76b68e96d855eb2817b43ac431a6bfb271a8 Mon Sep 17 00:00:00 2001 From: StepSecurity Bot Date: Wed, 13 Nov 2024 08:43:13 -0800 Subject: [PATCH] [StepSecurity] ci: Harden GitHub Actions (#23765) --- .github/workflows/update-osquery-versions.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/update-osquery-versions.yml b/.github/workflows/update-osquery-versions.yml index 89e81e4c7d..2955e2d2c1 100644 --- a/.github/workflows/update-osquery-versions.yml +++ b/.github/workflows/update-osquery-versions.yml @@ -12,9 +12,9 @@ jobs: pull-requests: write # for peter-evans/create-pull-request to create a PR runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1 with: python-version: "3.x" - name: Install dependencies @@ -22,7 +22,7 @@ jobs: - name: Update Osquery versions in UI run: python .github/scripts/update_osquery_versions.py - name: PR changes - uses: peter-evans/create-pull-request@v5 + uses: peter-evans/create-pull-request@4e1beaa7521e8b457b572c090b25bd3db56bf1c5 # v5.0.3 with: commit-message: Update MIN_OSQUERY_VERSION_OPTIONS title: "Fleet UI: Update osquery version options"