From 9a5368bf796339aae2231d124be1450ce12ac1f7 Mon Sep 17 00:00:00 2001 From: GoreeCloud Date: Mon, 12 Oct 2026 21:56:30 -0500 Subject: [PATCH] ci(code): pin immutable actions and verify Go modules --- .github/workflows/security-smoke.yml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/workflows/security-smoke.yml b/.github/workflows/security-smoke.yml index 99c18234d4..88e2f5b9f4 100644 --- a/.github/workflows/security-smoke.yml +++ b/.github/workflows/security-smoke.yml @@ -19,9 +19,9 @@ jobs: timeout-minutes: 30 steps: - name: Checkout source - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Set up security-patched Go - uses: actions/setup-go@v6 + uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version: '1.26.9' cache: true @@ -29,3 +29,7 @@ jobs: run: test "$(go version | awk '{print $3}')" = 'go1.26.9' - name: Verify charset utilities run: go test -p 2 -count=1 ./modules/charset + - name: Vet charset utilities + run: go vet ./modules/charset + - name: Verify downloaded module integrity + run: go mod verify