From 7759eb39ef3ab3b462ecb5929f1e2e64b9d0553c Mon Sep 17 00:00:00 2001 From: Calin Teodor Date: Wed, 14 Oct 2026 12:50:34 -0700 Subject: [PATCH] ci: pin third-party actions in ci.yml to commit SHAs Co-Authored-By: Claude Opus 5.5 --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d3f1bbf..9e356c7 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -38,7 +38,7 @@ jobs: run: go test -race -parallel 4 -coverprofile=coverage.out -covermode=atomic ./... - name: Upload coverage to Codecov - uses: codecov/codecov-action@v7 + uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7 with: files: ./rendezvous/coverage.out flags: unittests