Pin GitHub Actions to commit SHAs

Replace mutable tag references with immutable commit SHAs
to prevent supply-chain attacks via compromised tags.
Version comments are preserved for readability.
This commit is contained in:
Jesse Hills
2026-04-15 13:12:03 +12:00
parent 1b3e7d5ec4
commit 193e7d476d
+1 -1
View File
@@ -8,4 +8,4 @@ on:
jobs:
lock:
uses: esphome/workflows/.github/workflows/lock.yml@main
uses: esphome/workflows/.github/workflows/lock.yml@3c4e8446aa1029f1c346a482034b3ee1489077ca # 2026.4.0