From bef4e010396fd9e5c15b7afb7bfe8b5a9d59bf07 Mon Sep 17 00:00:00 2001 From: "Philip K. Warren" Date: Thu, 30 Apr 2026 13:23:59 -0500 Subject: [PATCH] Remove pinned actions Remove pinned actions for BCR release process (tags are required as part of slsa-verifier check). --- .github/workflows/publish-to-bcr.yaml | 2 +- .github/workflows/release.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish-to-bcr.yaml b/.github/workflows/publish-to-bcr.yaml index 173cc3e..a3b17ee 100644 --- a/.github/workflows/publish-to-bcr.yaml +++ b/.github/workflows/publish-to-bcr.yaml @@ -16,7 +16,7 @@ permissions: jobs: publish: - uses: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml@0a23c53c2baffdaf2ce8dd23c2c0e45eb3b79093 # v1.2.0 + uses: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml@v1.2.0 with: tag_name: ${{ inputs.tag_name || github.ref_name }} registry_fork: bufbuild/bazel-central-registry diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 7d27f30..cd5270a 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -39,7 +39,7 @@ jobs: sha: commitTag.data.sha, }); release: - uses: bazel-contrib/.github/.github/workflows/release_ruleset.yaml@af28703814cf26522cf5e44d219efece91293123 # v7.4.0 + uses: bazel-contrib/.github/.github/workflows/release_ruleset.yaml@v7.4.0 needs: create-release-tag with: release_files: rules_buf-*.tar.gz