Process for SHA-pin github action

2026-09-01 14:14:52 +08:00 · 2026-06-07 18:19:13 +10:00
parent 0eebc242fb
commit 26434e221e
4 changed files with 39 additions and 1 deletions
@@ -12,6 +12,6 @@ outputs:
    description: "The complete result from the yq command being run"
 runs:
  using: 'docker'
-  image: 'docker://mikefarah/yq:4-githubaction'
+  image: 'docker://mikefarah/yq:4-githubaction@sha256:e1b8c865f299ea6b02910a7ddf147d5d431244d4cc116f89c2148c9f53822906'
  args:
    - ${{ inputs.cmd }}