ci: pin external actions to exact commit SHA (#21033)

2026-03-26 20:44:00 +01:00
parent 287b5b1eab
commit 8c60b8a2be
6 changed files with 11 additions and 11 deletions
@@ -38,7 +38,7 @@ jobs:
    - name: Build package
      run: cd gguf-py && poetry build
    - name: Publish package
-      uses: pypa/gh-action-pypi-publish@release/v1
+      uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1
      with:
        password: ${{ secrets.PYPI_API_TOKEN }}
        packages-dir: gguf-py/dist