Merge pull request #1 from Iterable/git-hash-actions

Update action commits specifying full githash to avoid supply chain attacks
Iterable · Apr 22, 2024 · 1533f7d · 1533f7d
2 parents d1c3cb8 + 61f4150
commit 1533f7d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -7,10 +7,10 @@ jobs:
   publish:
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           fetch-depth: 0
-      - uses: actions/setup-java@v3
+      - uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3
         with:
           distribution: temurin
           java-version: 8