lauren f6d762cbbf [ci] Pin 3rd party actions to specific hash (#7690) ...

* [ci] Fix permissions and don't use pull_request_target

Defaults permissions to none for all workflows, and only request extra permissions when needed.

Similar to https://github.com/facebook/react/pull/32708, prefer the less permissive `pull_request` trigger instead.

* [ci] Pin 3rd party actions to specific hash

2025-03-21 16:32:50 -04:00

..

analyze_comment.yml

[ci] Pin 3rd party actions to specific hash (#7690)

2025-03-21 16:32:50 -04:00

analyze.yml

[ci] Pin 3rd party actions to specific hash (#7690)

2025-03-21 16:32:50 -04:00

discord_notify.yml

[ci] Fix permissions and don't use pull_request_target (#7689)

2025-03-21 16:32:38 -04:00

label_core_team_prs.yml

[ci] Fix permissions and don't use pull_request_target (#7689)

2025-03-21 16:32:38 -04:00

site_lint.yml

[ci] Fix permissions and don't use pull_request_target (#7689)

2025-03-21 16:32:38 -04:00