Merge pull request #50 from github/pin-action-version

github-samples · Nov 13, 2024 · 6943809 · 6943809
2 parents e091ce2 + 3c29e18
commit 6943809
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/content/what-the-hack/Coach/create-azure-resources.yml b/content/what-the-hack/Coach/create-azure-resources.yml
@@ -1,12 +1,15 @@
 on: [workflow_dispatch]
 name: Create Azure resources
+permissions:
+  contents: read
+  id-token: write
 jobs:
   build-and-deploy:
     runs-on: ubuntu-latest
     steps:
 
       # Checkout code
-    - uses: actions/checkout@main
+    - uses: actions/checkout@v4
 
       # Log into Azure
     - uses: azure/login@v1

diff --git a/content/what-the-hack/Coach/deploy.yml b/content/what-the-hack/Coach/deploy.yml
@@ -4,12 +4,16 @@ on:
       - main
 name: Deploy to Azure
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Log in to Azure
         uses: azure/login@v1