ci(actions): Pin commit for sync-branches action for security reasons

Holzhaus · Oct 15, 2024 · f639b1d · f639b1d
1 parent abe63be
commit f639b1d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/sync_branches.yml b/.github/workflows/sync_branches.yml
@@ -19,7 +19,8 @@ jobs:
     steps:
       - name: Merge ${{ matrix.from_branch }} into ${{ matrix.to_branch }}
         if: github.event_name == 'workflow_dispatch' || github.ref_name == matrix.from_branch
-        uses: tretuna/sync-branches@1.4.0
+        # Commit is pinned due to low popularity of the action repo.
+        uses: tretuna/sync-branches@ea58ab6e406fd3ad016a064b31270bbb41127f41
         with:
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
           FROM_BRANCH: ${{ matrix.from_branch }}