From 2d8a4cd1c2a2298f8ce4b564762b09e46173a9b0 Mon Sep 17 00:00:00 2001 From: "stepsecurity-app[bot]" <188008098+stepsecurity-app[bot]@users.noreply.github.com> Date: Thu, 2 Oct 2025 15:20:19 +0000 Subject: [PATCH] [StepSecurity] Apply security best practices Signed-off-by: StepSecurity Bot --- .github/workflows/flow-rust-ci.yaml | 4 ++-- .github/workflows/zxf-publish-release.yaml | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/flow-rust-ci.yaml b/.github/workflows/flow-rust-ci.yaml index 0964ce2a..b7c69ccc 100644 --- a/.github/workflows/flow-rust-ci.yaml +++ b/.github/workflows/flow-rust-ci.yaml @@ -65,7 +65,7 @@ jobs: sudo apt-get install -y --no-install-recommends gcc libc6-dev libc-dev libssl-dev pkg-config openssl - name: Install Protoc - uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0 + uses: step-security/setup-protoc@f6eb248a6510dbb851209febc1bd7981604a52e3 # v3.0.0 with: repo-token: ${{ secrets.GITHUB_TOKEN }} @@ -100,7 +100,7 @@ jobs: sudo apt-get install -y --no-install-recommends gcc libc6-dev libc-dev libssl-dev pkg-config openssl - name: Install Protoc - uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0 + uses: step-security/setup-protoc@f6eb248a6510dbb851209febc1bd7981604a52e3 # v3.0.0 with: repo-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/zxf-publish-release.yaml b/.github/workflows/zxf-publish-release.yaml index 9dfcdd6e..9dcde711 100644 --- a/.github/workflows/zxf-publish-release.yaml +++ b/.github/workflows/zxf-publish-release.yaml @@ -259,7 +259,7 @@ jobs: sudo apt-get install -y --no-install-recommends gcc libc6-dev libc-dev libssl-dev pkg-config openssl - name: Install Protoc - uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0 + uses: step-security/setup-protoc@f6eb248a6510dbb851209febc1bd7981604a52e3 # v3.0.0 with: repo-token: ${{ secrets.GITHUB_TOKEN }} @@ -329,7 +329,7 @@ jobs: cargo install toml-cli - name: Install Protoc - uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0 + uses: step-security/setup-protoc@f6eb248a6510dbb851209febc1bd7981604a52e3 # v3.0.0 with: repo-token: ${{ secrets.GITHUB_TOKEN }} @@ -492,7 +492,7 @@ jobs: echo "::endgroup::" - name: Generate Github Release - uses: ncipollo/release-action@bcfe5470707e8832e12347755757cec0eb3c22af # v1.18.0 + uses: step-security/release-action@03a57407052f15d1537fd5469a6fbbc536aba326 # v1.20.0 if: ${{ env.DRY_RUN_ENABLED != 'true' }} with: tag: ${{ needs.validate-release.outputs.tag }}