ci(gateway): pin candidate actions

2026-07-30 15:18:54 +07:00
parent f31cf5d68f
commit bdddd24436
2 changed files with 26 additions and 4 deletions
@@ -17,13 +17,13 @@ jobs:
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
-      - uses: actions/checkout@v7
-      - uses: actions/setup-go@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
        with:
          go-version: "1.26.5"
          cache: true
          cache-dependency-path: go.mod
-      - uses: oven-sh/setup-bun@v2
+      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
        with:
          bun-version: "1.3.13"
      - name: Verify Go and OpenSpec baseline
@@ -35,7 +35,7 @@ jobs:
          file dist/verse-gateway-linux-* | tee dist/file.txt
          go version -m dist/verse-gateway-linux-amd64 > dist/go-version-amd64.txt
          go version -m dist/verse-gateway-linux-arm64 > dist/go-version-arm64.txt
-      - uses: christopherhx/gitea-upload-artifact@v4
+      - uses: christopherhx/gitea-upload-artifact@81f940d004763f986ba3582c007fd842dd5cb0d7 # v4
        with:
          name: verse-gateway-linux-${{ gitea.sha }}
          path: dist/*