AI/diffusers
1
0
Fork 0
mirror of https://github.com/huggingface/diffusers.git synced 2026-10-23 09:09:01 +03:00
Code Activity

fix(ci): pin actions in workflows flagged on #15046

Browse Source
This commit is contained in:
hf-security-analysis[bot]
2026-10-15 16:33:13 +00:00
committed by GitHub
parent 7ecb1e1b4f
commit cd7cfe08bc
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/claude_review.yml vendored
View File

@@ -36,7 +36,7 @@ jobs:
cancel-in-progress: false
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 1

2
.github/workflows/pypi_publish.yaml vendored
View File

@@ -74,6 +74,6 @@ jobs:
path: dist/
- name: Publish package distributions to TestPyPI
uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1
uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
with:
verbose: true

2
.github/workflows/trufflehog.yml vendored
View File

@@ -17,7 +17,7 @@ jobs:
with:
fetch-depth: 0
- name: Secret Scanning
uses: trufflesecurity/trufflehog@bcfcf73aaf4759d4dadc2783177c245a02792318 # main
uses: trufflesecurity/trufflehog@bcfcf73aaf4759d4dadc2783177c245a02792318 # v3.97.0
with:
extra_args: --results=verified,unknown