From f9b0d7e45d7bc4a78546403b28f28dc785d48340 Mon Sep 17 00:00:00 2001 From: Mike Farah Date: Sun, 7 Jun 2026 19:49:39 +1000 Subject: [PATCH] Pinning using hashes --- .github/workflows/go.yml | 2 +- scripts/devtools.sh | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index 032f1ada..63c4e6e5 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -49,7 +49,7 @@ jobs: run: | go get -v -t -d ./... if [ -f Gopkg.toml ]; then - curl -sSfL https://raw.githubusercontent.com/golang/dep/v0.5.4/install.sh | env DEP_RELEASE_TAG=v0.5.4 sh + curl -sSfL https://raw.githubusercontent.com/golang/dep/1f7c19e5f52f49ffb9f956f64c010be14683468b/install.sh | env DEP_RELEASE_TAG=v0.5.4 sh dep ensure fi diff --git a/scripts/devtools.sh b/scripts/devtools.sh index f84a365d..970516dd 100755 --- a/scripts/devtools.sh +++ b/scripts/devtools.sh @@ -1,5 +1,5 @@ #!/bin/sh set -ex go mod download golang.org/x/tools@latest -curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/v2.11.3/install.sh | sh -s -- -b $(go env GOPATH)/bin v2.11.3 -curl -sSfL https://raw.githubusercontent.com/securego/gosec/v2.22.11/install.sh | sh -s v2.22.11 \ No newline at end of file +curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/6008b81b81c690c046ffc3fd5bce896da715d5fd/install.sh | sh -s -- -b $(go env GOPATH)/bin v2.11.3 +curl -sSfL https://raw.githubusercontent.com/securego/gosec/424fc4cd9c82ea0fd6bee9cd49c2db2c3cc0c93f/install.sh | sh -s v2.22.11 \ No newline at end of file