chore: pin release workflow to SHA for supply chain safety (#267)

Pin Azure/action-release-workflows to commit SHA instead of mutable v1 tag.
This commit is contained in:
David Gamero 2026-05-26 17:20:50 -04:00 committed by GitHub
parent 4f39f383be
commit f295d40337
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -13,6 +13,6 @@ jobs:
permissions:
actions: read
contents: write
uses: Azure/action-release-workflows/.github/workflows/release_js_project.yaml@v1
uses: Azure/action-release-workflows/.github/workflows/release_js_project.yaml@3c677ba5ab58f5c5c1a6f0cfb176b333b1f27405 # v1
with:
changelogPath: ./CHANGELOG.md