From 253f2c6796983b2297997f0c3d9960406cc9fd3b Mon Sep 17 00:00:00 2001 From: Ashwin Bhat Date: Tue, 27 May 2025 10:14:11 -0700 Subject: [PATCH] Pin GitHub Action dependencies to commit SHAs for security (#66) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Pin oven-sh/setup-bun and anthropics/claude-code-base-action to specific commit SHAs instead of version tags to ensure reproducible builds and improve supply chain security. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-authored-by: Claude --- action.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/action.yml b/action.yml index 85b882a..807f351 100644 --- a/action.yml +++ b/action.yml @@ -67,7 +67,7 @@ runs: using: "composite" steps: - name: Install Bun - uses: oven-sh/setup-bun@v2 + uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # https://github.com/oven-sh/setup-bun/releases/tag/v2.0.2 with: bun-version: 1.2.11 @@ -94,7 +94,7 @@ runs: - name: Run Claude Code id: claude-code if: steps.prepare.outputs.contains_trigger == 'true' - uses: anthropics/claude-code-base-action@beta + uses: anthropics/claude-code-base-action@5097b6cdfe5fc5a3ac0166cc344c34ed23c93982 # https://github.com/anthropics/claude-code-base-action/releases/tag/v0.0.5 with: prompt_file: /tmp/claude-prompts/claude-prompt.txt allowed_tools: ${{ env.ALLOWED_TOOLS }}