Pin GitHub Actions to full-length commit SHAs (#2574)

Co-authored-by: Dan Fiedler <danfiedler@microsoft.com>
2026-09-02 03:38:48 +01:00 · 2026-09-01 08:40:33 -07:00
parent a825a7ddc5
commit 325abbdff5
3 changed files with 39 additions and 30 deletions
@@ -7,3 +7,12 @@ updates:
    directory: "/"
    schedule:
      interval: "daily"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    groups:
+      github-actions:
+        patterns: ["*"]
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7