Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/workflows/required-quality-gate.yml
Original file line number Diff line number Diff line change
Expand Up @@ -38,15 +38,15 @@ jobs:
done

- name: Check out caller repository history
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
ref: ${{ github.event.pull_request.head.sha || github.event.merge_group.head_sha }}
path: caller
persist-credentials: false

- name: Check out immutable organization commit policy
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: HMG-AI/.github
ref: ${{ github.workflow_sha }}
Expand Down Expand Up @@ -77,15 +77,15 @@ jobs:
timeout-minutes: 10
steps:
- name: Check out immutable organization policy
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
with:
repository: HMG-AI/.github
ref: ${{ github.workflow_sha }}
path: policy-source
persist-credentials: false

- name: Check out exact event head
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
with:
ref: ${{ github.event.pull_request.head.sha || github.event.merge_group.head_sha }}
fetch-depth: 0
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/reusable-commitlint.yml
Original file line number Diff line number Diff line change
Expand Up @@ -46,15 +46,15 @@ jobs:
done

- name: Check out caller repository history
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
ref: ${{ inputs.head_sha }}
path: caller
persist-credentials: false

- name: Check out trusted commitlint assets
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: HMG-AI/.github
ref: 96bdc215df3db73fd1394e1e4f831e7e58caa702
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/reusable-hmg-public-promotion.yml
Original file line number Diff line number Diff line change
Expand Up @@ -123,7 +123,7 @@ jobs:
} >> "${GITHUB_OUTPUT}"

- name: Check out the exact reviewed HMG source
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
ref: ${{ steps.source-run.outputs.sha }}
fetch-depth: 0
Expand Down Expand Up @@ -166,7 +166,7 @@ jobs:
echo "sha=${source_sha}" >> "${GITHUB_OUTPUT}"

- name: Check out the protected target base
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: HMG-AI/HMG-public
ref: main
Expand Down Expand Up @@ -525,7 +525,7 @@ jobs:
contents: read
steps:
- name: Check out the current protected target base
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: HMG-AI/HMG-public
ref: main
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/reusable-hmg-public-quality.yml
Original file line number Diff line number Diff line change
Expand Up @@ -77,7 +77,7 @@ jobs:
fi

- name: Check out the candidate with full history
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
ref: ${{ inputs.head_sha }}
fetch-depth: 0
Expand Down