security: pin tj-actions/changed-files to a non-compromised commit (#2086)

pin tj-actions/changed-files to a non-compromised commit

https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised

Signed-off-by: Félix Saparelli <felix@passcod.name>
This commit is contained in:
Félix Saparelli 2025-03-15 18:14:48 +13:00 committed by GitHub
parent e2ef5918cf
commit e017e53588
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -53,7 +53,7 @@ jobs:
- name: Get changed files
id: changed-files
uses: tj-actions/changed-files@v45
uses: tj-actions/changed-files@9200e69727eb73eb060652b19946b8a2fdfb654b
with:
dir_names: true
dir_names_exclude_current_dir: true