55 schedule :
66 - cron : " 3 4 * * 5"
77
8+ permissions :
9+ contents : read
10+
811jobs :
912 lint :
1013 runs-on : ubuntu-latest
1114 steps :
1215 - name : Checkout repository
13- uses : actions/checkout@v5
16+ uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
1417 with :
1518 persist-credentials : false
1619
1720 - name : Setup Node.js
18- uses : actions/setup-node@v5
21+ uses : actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
1922 with :
20- node-version : 22
23+ node-version : 24
2124
2225 - name : Install dependencies
2326 run : npm ci
@@ -29,14 +32,14 @@ jobs:
2932 runs-on : ubuntu-latest
3033 steps :
3134 - name : Checkout repository
32- uses : actions/checkout@v5
35+ uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
3336 with :
3437 persist-credentials : false
3538
3639 - name : Setup Node.js
37- uses : actions/setup-node@v5
40+ uses : actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
3841 with :
39- node-version : 22
42+ node-version : 24
4043
4144 - name : Install dependencies
4245 run : npm ci
@@ -48,14 +51,14 @@ jobs:
4851 runs-on : ubuntu-latest
4952 steps :
5053 - name : Checkout repository
51- uses : actions/checkout@v5
54+ uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
5255 with :
5356 persist-credentials : false
5457
5558 - name : Setup Node.js
56- uses : actions/setup-node@v5
59+ uses : actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
5760 with :
58- node-version : 22
61+ node-version : 24
5962
6063 - name : Install dependencies
6164 run : npm ci
@@ -73,21 +76,21 @@ jobs:
7376 security-events : write
7477 steps :
7578 - name : Checkout repository
76- uses : actions/checkout@v5
79+ uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
7780 with :
7881 persist-credentials : false
7982
8083 - name : Initialize CodeQL
81- uses : github/codeql-action/init@v4
84+ uses : github/codeql-action/init@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
8285 with :
8386 languages : javascript
8487
8588 - name : Perform CodeQL Analysis
86- uses : github/codeql-action/analyze@v4
89+ uses : github/codeql-action/analyze@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
8790
8891 - name : Run Snyk to check for vulnerabilities
8992 if : ${{ 'Actions' == github.secret_source }}
90- uses : snyk/actions/node@master
93+ uses : snyk/actions/node@9adf32b1121593767fc3c057af55b55db032dc04 # v1.0.0
9194 continue-on-error : true
9295 env :
9396 SNYK_TOKEN : ${{ secrets.SNYK_TOKEN }}
9699
97100 - name : Upload Snyk result to GitHub Code Scanning
98101 if : ${{ 'Actions' == github.secret_source }}
99- uses : github/codeql-action/upload-sarif@v4
102+ uses : github/codeql-action/upload-sarif@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
100103 with :
101104 sarif_file : snyk.sarif
0 commit comments