From d58daf620f535023f7246926fc33d9da7739920a Mon Sep 17 00:00:00 2001 From: Jurriaan Wijnberg Date: Thu, 12 Mar 2026 14:23:21 +0100 Subject: [PATCH] Update GitHub Actions to use specific versions for checkout and setup-dotnet --- .github/workflows/dotnet-core.yml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/dotnet-core.yml b/.github/workflows/dotnet-core.yml index 959d2fe..0cd9c95 100644 --- a/.github/workflows/dotnet-core.yml +++ b/.github/workflows/dotnet-core.yml @@ -10,8 +10,8 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-dotnet@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1 with: global-json-file: "./global.json" - run: dotnet restore @@ -20,5 +20,7 @@ jobs: - run: dotnet pack --no-build --configuration Release --output . - name: Publish nugets if: github.event_name != 'pull_request' + env: + NUGET_API_KEY: ${{secrets.NUGET_API_KEY}} run: | - dotnet nuget push *.nupkg --source https://api.nuget.org/v3/index.json --api-key ${{secrets.NUGET_API_KEY}} --skip-duplicate --no-symbols + dotnet nuget push *.nupkg --source https://api.nuget.org/v3/index.json --api-key "$NUGET_API_KEY" --skip-duplicate --no-symbols