From 5402406ea23d9c331952960485e6948036e4f092 Mon Sep 17 00:00:00 2001 From: Carol Willing Date: Fri, 13 Mar 2026 19:31:38 -0700 Subject: [PATCH 1/2] fix: pin action to official source instead of bash execution --- .github/workflows/main.yml | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 1f0dbcd9..760abbd0 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -13,7 +13,6 @@ jobs: steps: - uses: actions/checkout@v6 - name: Check workflow files - run: | - bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash) - ./actionlint -color -ignore SC2129 - shell: bash + uses: rhysd/actionlint@35082e035dc23c2dea5e58bbde3cfe1523204498 # v1.7.7 + with: + args: -color -ignore SC2129 From e047226c803002673a9321c598b92fdde097a8aa Mon Sep 17 00:00:00 2001 From: Carol Willing Date: Fri, 13 Mar 2026 19:36:33 -0700 Subject: [PATCH 2/2] bump version --- .github/workflows/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 760abbd0..a0dee568 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -13,6 +13,6 @@ jobs: steps: - uses: actions/checkout@v6 - name: Check workflow files - uses: rhysd/actionlint@35082e035dc23c2dea5e58bbde3cfe1523204498 # v1.7.7 + uses: rhysd/actionlint@393031adb9afb225ee52ae2ccd7a5af5525e03e8 # v1.7.11 with: args: -color -ignore SC2129