From 162d2ba76b008c37d9523444f556f8716dc89ae9 Mon Sep 17 00:00:00 2001 From: Sujeito Operator Date: Sun, 30 Aug 2026 17:03:19 +0200 Subject: [PATCH] ci: pin `Ilshidur/action-discord` to a commit instead of the `master` branch `Ilshidur/action-discord@master` is resolved at run time, so the code that runs in this repository is whatever that action's author last pushed. The workflow is triggered by issues, issue_comment, pull_request, discussion and watch -- all events a stranger causes -- and the job holds the Discord webhooks, the Google Apps Script endpoint and the default GITHUB_TOKEN. master resolves today to d2594079a10f1d6739ee50a2471f0ca57418b554, which is also tag 0.4.0, so this pin runs exactly the code that runs now. --- .github/workflows/main.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index b53eb7be4..7d92f399c 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -34,7 +34,11 @@ jobs: fi - name: Discord Notification - uses: Ilshidur/action-discord@master + # Pinned to a commit rather than a branch: `@master` is resolved at run time, + # so the code that runs here can change with no change to this repository. + # This commit is what `master` points at today and is also tag 0.4.0, + # so nothing about the current behaviour changes. + uses: Ilshidur/action-discord@d2594079a10f1d6739ee50a2471f0ca57418b554 # 0.4.0 env: DISCORD_WEBHOOK: ${{ steps.set-webhook.outputs.webhook }} with: