From 38be58564a766cd79e6aab9051c1b3866555807c Mon Sep 17 00:00:00 2001 From: Dan Fiedler Date: Sat, 5 Sep 2026 22:08:01 -0400 Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs --- .github/dependabot.yml | 2 ++ .github/workflows/eol-blocker.yml | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 65dedd3..077625d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,3 +5,5 @@ updates: schedule: interval: daily open-pull-requests-limit: 10 + cooldown: + default-days: 7 \ No newline at end of file diff --git a/.github/workflows/eol-blocker.yml b/.github/workflows/eol-blocker.yml index 257faa0..ff0aa3e 100644 --- a/.github/workflows/eol-blocker.yml +++ b/.github/workflows/eol-blocker.yml @@ -18,4 +18,4 @@ jobs: repoToken: ${{ secrets.GITHUB_TOKEN }} excludeFiles: '**/**.{png,PNG,jpg,JPG,jpeg,JPEG,gif,GIF,bmp,BMP}' id: validate - uses: microsoftgraph/eol-blocker@v1.0.15 + uses: microsoftgraph/eol-blocker@14648e1b1978662860dcc551e70aeb13ad741486 # v1.0.15