ci: add zizmor workflow and pin all GitHub Actions to SHA hashes (#5237)

This commit is contained in:
Benji Visser 2026-03-25 12:28:41 -04:00 committed by GitHub
parent e909d3e4a1
commit f84563175f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
15 changed files with 92 additions and 41 deletions

View file

@ -10,11 +10,11 @@ jobs:
contents: write
pull-requests: write
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
with:
token: ${{ secrets.SKYVERN_OSS_GITHUB_TOKEN }}
- name: Update OpenAPI Spec
uses: fern-api/sync-openapi@v2
uses: fern-api/sync-openapi@8e936a4bac8ad11d698d7114f3074fa3397398ea # v2
with:
token: ${{ secrets.SKYVERN_OSS_GITHUB_TOKEN }}
branch: 'update-openapi-spec'