From 1033489303e23aea9e6720ebc72c8d9cb33af02a Mon Sep 17 00:00:00 2001 From: Paul McCann Date: Thu, 20 Mar 2025 09:48:42 +0000 Subject: [PATCH] Update labeler.yml Pinning action to a full length commit SHA [see](https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions) --- .github/workflows/labeler.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 353f84697..ca446223e 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -47,7 +47,7 @@ jobs: - name: Add comment for community PR if: contains(steps.is_elastic_member.outputs.result, 'false') && github.actor != 'dependabot[bot]' && github.actor != 'elastic-observability-automation[bot]' - uses: wow-actions/auto-comment@v1 + uses: wow-actions/auto-comment@2fc064c21cfb2505de3c5c10e1473b8eb7beca1a # v1.1.2 with: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} pullRequestOpened: | @@ -55,4 +55,4 @@ jobs: It may take some time before we review a PR, so even if you don’t see activity for some time, it **does not** mean that we have forgotten about it. - Every once in a while we go through a process of prioritization, after which we are focussing on the tasks that were planned for the upcoming [milestone](https://github.com/elastic/apm-agent-dotnet/milestones). The prioritization status is typically reflected through the PR labels. It could be pending triage, a candidate for a future milestone, or have a target milestone set to it. \ No newline at end of file + Every once in a while we go through a process of prioritization, after which we are focussing on the tasks that were planned for the upcoming [milestone](https://github.com/elastic/apm-agent-dotnet/milestones). The prioritization status is typically reflected through the PR labels. It could be pending triage, a candidate for a future milestone, or have a target milestone set to it.