Skip to content

Bump the actions-all-dependencies group across 1 directory with 2 updates #162

Bump the actions-all-dependencies group across 1 directory with 2 updates

Bump the actions-all-dependencies group across 1 directory with 2 updates #162

name: Ensure actions are pinned to SHAs
on:
workflow_call:
pull_request:
paths:
- ".github/workflows/**.yml"
- ".github/workflows/**.yaml"
jobs:
check-actions-sha:
name: Check actions are pinned to SHAs
runs-on: ubuntu-24.04-arm
steps:
- name: Checkout code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Ensure SHA pinned actions
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@6124774845927d14c601359ab8138699fa5b70c3 # v4.0.1
with:
allowlist: alphagov/forms-deploy