mirror of
https://github.com/microsoft/terminal.git
synced 2026-04-05 21:59:47 +00:00
actions: pin the hash of the check-spelling action (#20022)
In theory, somebody could compromise jsoref and push a new `v0.0.25` tag. As if.
This commit is contained in:
8
.github/workflows/spelling2.yml
vendored
8
.github/workflows/spelling2.yml
vendored
@@ -93,7 +93,7 @@ jobs:
|
|||||||
steps:
|
steps:
|
||||||
- name: check-spelling
|
- name: check-spelling
|
||||||
id: spelling
|
id: spelling
|
||||||
uses: check-spelling/check-spelling@v0.0.25
|
uses: check-spelling/check-spelling@c635c2f3f714eec2fcf27b643a1919b9a811ef2e # v0.0.25
|
||||||
with:
|
with:
|
||||||
suppress_push_for_open_pull_request: ${{ github.actor != 'dependabot[bot]' && 1 }}
|
suppress_push_for_open_pull_request: ${{ github.actor != 'dependabot[bot]' && 1 }}
|
||||||
checkout: true
|
checkout: true
|
||||||
@@ -153,7 +153,7 @@ jobs:
|
|||||||
if: (success() || failure()) && needs.spelling.outputs.followup && github.event_name == 'push'
|
if: (success() || failure()) && needs.spelling.outputs.followup && github.event_name == 'push'
|
||||||
steps:
|
steps:
|
||||||
- name: comment
|
- name: comment
|
||||||
uses: check-spelling/check-spelling@v0.0.25
|
uses: check-spelling/check-spelling@c635c2f3f714eec2fcf27b643a1919b9a811ef2e # v0.0.25
|
||||||
with:
|
with:
|
||||||
checkout: true
|
checkout: true
|
||||||
spell_check_this: microsoft/terminal@main
|
spell_check_this: microsoft/terminal@main
|
||||||
@@ -171,7 +171,7 @@ jobs:
|
|||||||
if: (success() || failure()) && needs.spelling.outputs.followup && contains(github.event_name, 'pull_request')
|
if: (success() || failure()) && needs.spelling.outputs.followup && contains(github.event_name, 'pull_request')
|
||||||
steps:
|
steps:
|
||||||
- name: comment
|
- name: comment
|
||||||
uses: check-spelling/check-spelling@v0.0.25
|
uses: check-spelling/check-spelling@c635c2f3f714eec2fcf27b643a1919b9a811ef2e # v0.0.25
|
||||||
with:
|
with:
|
||||||
checkout: true
|
checkout: true
|
||||||
spell_check_this: microsoft/terminal@main
|
spell_check_this: microsoft/terminal@main
|
||||||
@@ -197,7 +197,7 @@ jobs:
|
|||||||
cancel-in-progress: false
|
cancel-in-progress: false
|
||||||
steps:
|
steps:
|
||||||
- name: apply spelling updates
|
- name: apply spelling updates
|
||||||
uses: check-spelling/check-spelling@v0.0.25
|
uses: check-spelling/check-spelling@c635c2f3f714eec2fcf27b643a1919b9a811ef2e # v0.0.25
|
||||||
with:
|
with:
|
||||||
experimental_apply_changes_via_bot: ${{ github.repository_owner != 'microsoft' && 1 }}
|
experimental_apply_changes_via_bot: ${{ github.repository_owner != 'microsoft' && 1 }}
|
||||||
checkout: true
|
checkout: true
|
||||||
|
|||||||
Reference in New Issue
Block a user