From 538726f1a1f1e2a3e79ccad977b5f6fdbca23269 Mon Sep 17 00:00:00 2001 From: Rob Nester Date: Thu, 27 Aug 2026 15:55:34 -0400 Subject: [PATCH] ci: pin conforma actions and reusable workflows to commit SHAs Pin the cross-org conforma/* references to commit SHAs (EC-2130): - conforma/pr-size-label-action@v1.0.0 -> 8b1fcdb - conforma/github-workflows/.github/workflows/auto-merge.yaml@main -> db8c967 Co-Authored-By: Claude Ref: EC-2130 --- .github/workflows/auto-merge.yaml | 2 +- .github/workflows/label-pr-size.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/auto-merge.yaml b/.github/workflows/auto-merge.yaml index ec6df53..15e105a 100644 --- a/.github/workflows/auto-merge.yaml +++ b/.github/workflows/auto-merge.yaml @@ -22,7 +22,7 @@ name: 'Auto merge' jobs: auto-merge: - uses: conforma/github-workflows/.github/workflows/auto-merge.yaml@main + uses: conforma/github-workflows/.github/workflows/auto-merge.yaml@db8c967cda18f9d4c69b1808f703fb61cdf1c650 # main secrets: inherit permissions: pull-requests: write diff --git a/.github/workflows/label-pr-size.yaml b/.github/workflows/label-pr-size.yaml index 9df05b5..bf922d2 100644 --- a/.github/workflows/label-pr-size.yaml +++ b/.github/workflows/label-pr-size.yaml @@ -29,4 +29,4 @@ jobs: runs-on: ubuntu-latest steps: - name: Label PR by size - uses: conforma/pr-size-label-action@v1.0.0 + uses: conforma/pr-size-label-action@8b1fcdb87ab3ef4b79f9708fedf686904375e2d3 # v1.0.0