From 11e3fe427cd5009f502e075d1eea7c35c6568ce2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dan=20Gr=C3=B8ndahl?= Date: Tue, 27 Oct 2026 13:01:14 +0100 Subject: [PATCH] ci: pin claude-code-action to commit SHA --- .github/workflows/claude-pr-review.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/claude-pr-review.yml b/.github/workflows/claude-pr-review.yml index f9914e82d..5ccc7c92f 100644 --- a/.github/workflows/claude-pr-review.yml +++ b/.github/workflows/claude-pr-review.yml @@ -77,7 +77,7 @@ jobs: cat builder-image.md >> "$GITHUB_STEP_SUMMARY" - name: Claude review (dependency updates) - uses: anthropics/claude-code-action@v1.0.262 + uses: anthropics/claude-code-action@925afb53776cf1a2b738c6bdbed37b4d4000ef13 # v1.0.262 env: GH_TOKEN: ${{ github.token }} @@ -143,7 +143,7 @@ jobs: - name: Claude review (general) if: github.event.action != 'synchronize' - uses: anthropics/claude-code-action@v1.0.262 + uses: anthropics/claude-code-action@925afb53776cf1a2b738c6bdbed37b4d4000ef13 # v1.0.262 env: GH_TOKEN: ${{ github.token }} with: @@ -200,7 +200,7 @@ jobs: # ── Follow-up on pushes: only the delta and existing findings ──────────── - name: Follow-up Claude review (new commits only) if: github.event.action == 'synchronize' - uses: anthropics/claude-code-action@v1.0.262 + uses: anthropics/claude-code-action@925afb53776cf1a2b738c6bdbed37b4d4000ef13 # v1.0.262 env: GH_TOKEN: ${{ github.token }} with: