From 13a37c679854ddffb5f84adf46f5f6317a4c0e6a Mon Sep 17 00:00:00 2001 From: Kobi Hikri Date: Mon, 13 Jul 2026 19:16:53 +0300 Subject: [PATCH] ci: pin jlumbroso/free-disk-space to a full commit SHA docker-publish.yml references this third-party action by the mutable @main tag, in a job that logs in to the container registry and pushes images. The workflow already SHA-pins docker/login-action, so this brings free-disk-space in line. Pin it to the current main commit SHA (tag kept in a trailing comment). Behaviour unchanged; per GitHub's guidance to pin actions to a full-length commit SHA. Signed-off-by: Kobi Hikri --- .github/workflows/docker-publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index e789039efd..5d07e2f231 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -30,7 +30,7 @@ jobs: steps: - name: Free Disk Space (Ubuntu) - uses: jlumbroso/free-disk-space@main + uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # main with: tool-cache: true android: true