[MOO-2415] - Update NMR test project - 11.12 #707

	name: Ensure SHA pinned actions

	on:
	push:
	branches: [main, 'mx/11.12.x']
	paths:
	- ".github/workflows/*.yml"
	pull_request:
	branches: [main, 'mx/11.12.x']
	paths:
	- ".github/workflows/*.yml"

	# Supersede in-flight runs: a new push to the same PR/branch cancels the previous run
	# instead of queueing beside it (this repo shares GitHub Free's 20-concurrent-job cap with
	# NativePipeline, so stale runs directly delay the ones that matter). Only PR runs are
	# cancelled — a push run on main/mx-* is the recorded result for that commit, so let it finish.
	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: ${{ github.event_name == 'pull_request' }}

	jobs:
	harden_security:
	name: Check SHA in GH Actions
	runs-on: ubuntu-latest
	steps:
	- name: "Checking-out code"
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	submodules: false
	- name: "Ensure SHA pinned actions"
	uses: zgosalvez/github-actions-ensure-sha-pinned-actions@471d5ace1f08e3c4df1c4c2f7e6341aa75da434a # v5.0.3

Navigation Menu