From 1667b2e8a0ec2bf64bf12e26d06144dc64b7741c Mon Sep 17 00:00:00 2001 From: Paul McCann Date: Thu, 20 Mar 2025 10:22:57 +0000 Subject: [PATCH] Update labeler.yml Pinning action to a full length commit SHA [see](https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions) --- .github/workflows/labeler.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 4cd4a8af..6473cc44 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Add agent-java label - uses: AlexanderWert/issue-labeler@v2.3 + uses: AlexanderWert/issue-labeler@32be4a3c3d8f009c2741af471994337c34b4cb6f # v2.3 with: repo-token: "${{ secrets.GITHUB_TOKEN }}" configuration-path: .github/labeler-config.yml @@ -49,7 +49,7 @@ jobs: echo "::debug::isExcluded: ${{ steps.checkUserMember.outputs.isExcluded }}" - name: Add community and triage lables if: steps.checkUserMember.outputs.isTeamMember != 'true' && steps.checkUserMember.outputs.isExcluded != 'true' - uses: AlexanderWert/issue-labeler@v2.3 + uses: AlexanderWert/issue-labeler@32be4a3c3d8f009c2741af471994337c34b4cb6f # v2.3 with: repo-token: "${{ secrets.GITHUB_TOKEN }}" configuration-path: .github/community-label.yml