super-productivity/.github
Lane Sawyer c2ab4fe973
ci(actions): SHA-pin remaining workflow actions (#8868)
* ci(actions): SHA-pin remaining workflow actions

Replace the mutable derekprior/add-autoresponse@master ref in
issue-open-auto-reply.yml with an inline actions/github-script snippet
to remove the third-party code-injection risk in CI. SHA-pin the 4
remaining tag-pinned actions in wiki-sync.yml (checkout, setup-python)
to match the rest of the workflows.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* wrong sha for the github-script v9

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-09 15:28:59 +02:00
..
actions ci(electron-build): cache electron binary + retry npm i to fix flaky install (#8487) 2026-06-19 13:02:33 +02:00
annotations docs(wiki): initial revision (v0.1) 2026-01-20 03:04:08 -08:00
ISSUE_TEMPLATE Housekeeping for various docs, templates, and actions (#7451) 2026-05-02 13:58:25 +02:00
workflows ci(actions): SHA-pin remaining workflow actions (#8868) 2026-07-09 15:28:59 +02:00
CODE_OF_CONDUCT.md docs: add code of conduct 2021-09-20 13:04:44 +02:00
CODEOWNERS security: add CODEOWNERS, enhance Dependabot, document manual setup 2026-01-21 14:30:24 +01:00
CONTRIBUTING.md docs/wiki content v0.8 (#7068) 2026-04-01 12:40:28 +02:00
dependabot.yml chore(deps): ngrx + capacitor updates, dependabot grouping, safe tooling refresh (#8664) 2026-07-01 14:54:55 +02:00
FUNDING.yml Create FUNDING.yml 2020-05-05 12:34:24 +02:00
PULL_REQUEST_TEMPLATE.md docs/wiki content v0.8 (#7068) 2026-04-01 12:40:28 +02:00
SECURITY-SETUP.md security: add CODEOWNERS, enhance Dependabot, document manual setup 2026-01-21 14:30:24 +01:00