# Pin workflow actions and service images to immutable SHAs \(\#58964\) · gitcafe/zed

[View on GitCafe](https://git.cafe/gitcafe/zed/commit/8fced01bcfa44f28d266188357ba5f2600687eea)

Repository: [gitcafe/zed](https://git.cafe/gitcafe/zed)

Visibility: public

Requested revision: 8fced01bcfa44f28d266188357ba5f2600687eea

Requested commit: 8fced01bcfa44f28d266188357ba5f2600687eea

Commit: 8fced01bcfa44f28d266188357ba5f2600687eea

Tree: ded61ed47cdf4d9828250599277db5cfd854c252

Author: John D\. Swanson

Committer: GitHub

## Message

```
Pin workflow actions and service images to immutable SHAs (#58964)

Pins the remaining tag- and branch-referenced GitHub Actions and the
`postgres` service image to specific commit SHAs / digests, so workflow
runs resolve to fixed versions. Edited in the xtask workflow DSL and
regenerated with `cargo xtask workflows`.

- `bufbuild/buf-setup-action` → `a47c93e0` (v1.50.0)
- `bufbuild/buf-breaking-action` → `c57b3d84` (v1.1.4)
- `digitalocean/action-doctl` → `3cb39531` (v2.5.2)
- `postgres:15` → `@sha256:1b92e7a8…`
- `deploy_docs.yml` reusable workflow → pinned to a commit

Release Notes:

- N/A
```

## Parents

- [881b4fb9bc2ee8f4d67c8b963eeba58baa781375](https://git.cafe/gitcafe/zed/commit/881b4fb9bc2ee8f4d67c8b963eeba58baa781375?format=markdown)

[Source at this commit](https://git.cafe/gitcafe/zed/tree/8fced01bcfa44f28d266188357ba5f2600687eea?format=markdown)