From b9b64ece8f7237637ab10de782346c7b27d75e88 Mon Sep 17 00:00:00 2001 From: jon8787 <112368577+jon8787@users.noreply.github.com> Date: Tue, 14 Apr 2026 14:19:30 +1000 Subject: [PATCH] UID2-6913: Pin third-party GitHub Action refs to commit SHAs Co-Authored-By: Claude Opus 4.6 --- .github/workflows/deployPreview.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/deployPreview.yml b/.github/workflows/deployPreview.yml index 05b3eb8e8..92890840e 100644 --- a/.github/workflows/deployPreview.yml +++ b/.github/workflows/deployPreview.yml @@ -27,7 +27,7 @@ jobs: - name: Clone to preview folder (excluding actions) run: rsync -arv --delete --delete-excluded --exclude=".github" --exclude="preview-output" --exclude="preview-output" --exclude=".git" ./ preview-output/ - name: Push to staging repository - uses: cpina/github-action-push-to-another-repository@main + uses: cpina/github-action-push-to-another-repository@55306faa4ed53b815ae49e564af8cfb359d32ae2 # main env: SSH_DEPLOY_KEY: ${{ secrets.SSH_DEPLOY_KEY }} with: