dnrops
/
this-week-in-rust
mirror of https://github.com/rust-lang/this-week-in-rust
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

security: pin version of py-actions/py-dependency-install 

Remeidates: https://docs.zizmor.sh/audits/#impostor-commit
Version: https://github.com/py-actions/py-dependency-install/releases/tag/v4.0.0
This commit is contained in:
andrewpollack 2025-06-08 08:19:08 -07:00
parent 2dadd31ebd
commit f6a7af63b9
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/checks.yml vendored
View File

@ -6,6 +6,7 @@ permissions:
jobs: jobs:
Run-Markdown-Checks: Run-Markdown-Checks:
name: Run Markdown Checks
runs-on: ubuntu-24.04 runs-on: ubuntu-24.04
steps: steps:
- name: checkout - name: checkout
@ -13,7 +14,7 @@ jobs:
with: with:
persist-credentials: false persist-credentials: false
- name: Install Python dependencies - name: Install Python dependencies
uses: py-actions/py-dependency-install@v4 uses: py-actions/py-dependency-install@9c419aa98bfb42280bdae2b0a736befd9b01e3b1 # v4
with: with:
path: "tools/requirements.txt" path: "tools/requirements.txt"
update-pip: "false" update-pip: "false"