Pin some more action versions
ci: pin some more action versions (#36343)
Pin some more action versionscipin some more action versions
Committed by step-security-bot
commit message
ci: pin some more action versions (#36343)
* [StepSecurity] ci: Harden GitHub Actions
Signed-off-by: StepSecurity Bot <[email protected]>
* Update electron_woa_testing.yml
Signed-off-by: StepSecurity Bot <[email protected]>
Co-authored-by: Jeremy Rose <[email protected]>Editor assessment
The header 'pin some more action versions' is appropriately typed but vaguely worded — 'some more' tells readers nothing about which workflows or why, and the rationale (continuing the StepSecurity hardening effort) is only inferable from the body. That body mixes PR-trail fragments ('[StepSecurity] ci: Harden GitHub Actions', 'Update electron_woa_testing.yml') with a correctly formatted `Signed-off-by:` footer and a `Co-authored-by:` trailer — the footer structure is right even if the narrative is assembled from scraps.