kou commented on code in PR #60:
URL: https://github.com/apache/arrow-erlang/pull/60#discussion_r3470525223


##########
.github/workflows/docs.yml:
##########
@@ -59,12 +59,12 @@ jobs:
             test-native-${{ runner.os }}-${{ env.RUST_TOOLCHAIN_VERSION }}
 
       - name: Install Rust
-        uses: dtolnay/rust-toolchain@master
+        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
         with:
           toolchain: "${{ env.RUST_TOOLCHAIN_VERSION }}"
 
       - name: Install Erlang/OTP
-        uses: erlef/setup-beam@v1
+        uses: erlef/setup-beam@fc68ffb90438ef2936bbb3251622353b3dcb2f93

Review Comment:
   Could you add `# ${TAG_NAME}` comment that will be updated automatically by 
Dependabot:
   
   
   ```suggestion
           uses: erlef/setup-beam@fc68ffb90438ef2936bbb3251622353b3dcb2f93 # 
v1.24.0
   ```



##########
.github/workflows/rust-ci.yml:
##########
@@ -39,12 +39,12 @@ jobs:
     steps:
       - uses: actions/checkout@v3
 
-      - uses: dtolnay/rust-toolchain@master
+      - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
         with:
           toolchain: "${{ env.RUST_TOOLCHAIN_VERSION }}"
           components: clippy
 
-      - uses: Swatinem/rust-cache@v2
+      - uses: swatinem/rust-cache@v2

Review Comment:
   Could you use SHA256 here too?



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to