Merge pull request #181 from django-commons/security

tighten tag on debug GHA, remove where unnecessary

Author: bckohan

.github/workflows/lint.yml

@@ -62,7 +62,7 @@ jobs:
           sudo apt install emacs
       - name: Setup tmate session
         if: ${{ github.event.inputs.debug == 'true' }}
-        uses: mxschmitt/action-tmate@v3
+        uses: mxschmitt/action-tmate@v3.19
         with:
           detached: true
         timeout-minutes: 60

.github/workflows/test.yml

@@ -65,7 +65,7 @@ jobs:
         sudo apt install emacs
     - name: setup-ssh-debug
       if: ${{ github.event.inputs.debug == 'true' }}
-      uses: mxschmitt/action-tmate@v3
+      uses: mxschmitt/action-tmate@v3.19
       with:
         detached: true
       timeout-minutes: 60
@@ -119,7 +119,7 @@ jobs:
         python-version: ${{ matrix.python-version }}
     - name: setup-ssh-debug
       if: ${{ github.event.inputs.debug == 'true' }}
-      uses: mxschmitt/action-tmate@v3
+      uses: mxschmitt/action-tmate@v3.19
       with:
         detached: true
     - name: install-vim-windows
@@ -177,7 +177,7 @@ jobs:
         brew install emacs
     - name: setup-ssh-debug
       if: ${{ github.event.inputs.debug == 'true' }}
-      uses: mxschmitt/action-tmate@v3
+      uses: mxschmitt/action-tmate@v3.19
       with:
         detached: true
     - name: Setup Just
@@ -251,7 +251,7 @@ jobs:
             sudo apt install emacs
         - name: setup-ssh-debug
           if: ${{ github.event.inputs.debug == 'true' }}
-          uses: mxschmitt/action-tmate@v3
+          uses: mxschmitt/action-tmate@v3.19
           with:
             detached: true
         - name: Setup Just
@@ -304,7 +304,7 @@ jobs:
         sudo apt install emacs
     - name: setup-ssh-debug
       if: ${{ github.event.inputs.debug == 'true' }}
-      uses: mxschmitt/action-tmate@v3
+      uses: mxschmitt/action-tmate@v3.19
       with:
         detached: true
     - name: Setup Just
@@ -358,7 +358,7 @@ jobs:
         sudo apt install emacs
     - name: setup-ssh-debug
       if: ${{ github.event.inputs.debug == 'true' }}
-      uses: mxschmitt/action-tmate@v3
+      uses: mxschmitt/action-tmate@v3.19
       with:
         detached: true
     - name: Setup Just
@@ -418,7 +418,7 @@ jobs:
         brew install emacs
     - name: setup-ssh-debug
       if: ${{ github.event.inputs.debug == 'true' }}
-      uses: mxschmitt/action-tmate@v3
+      uses: mxschmitt/action-tmate@v3.19
       with:
         detached: true
     - name: Setup Just
@@ -484,7 +484,7 @@ jobs:
         brew install emacs
     - name: setup-ssh-debug
       if: ${{ github.event.inputs.debug == 'true' }}
-      uses: mxschmitt/action-tmate@v3
+      uses: mxschmitt/action-tmate@v3.19
       with:
         detached: true
     - name: Setup Just
@@ -540,7 +540,7 @@ jobs:
         brew install emacs
     - name: setup-ssh-debug
       if: ${{ github.event.inputs.debug == 'true' }}
-      uses: mxschmitt/action-tmate@v3
+      uses: mxschmitt/action-tmate@v3.19
       with:
         detached: true
     - name: Setup Just
@@ -603,7 +603,7 @@ jobs:
       uses: rhysd/action-setup-vim@v1
     - name: setup-ssh-debug
       if: ${{ github.event.inputs.debug == 'true' }}
-      uses: mxschmitt/action-tmate@v3
+      uses: mxschmitt/action-tmate@v3.19
       with:
         detached: true
     - name: Add to Poetry to PATH
@@ -656,7 +656,7 @@ jobs:
           sudo apt install emacs
       - name: setup-ssh-debug
         if: ${{ github.event.inputs.debug == 'true' }}
-        uses: mxschmitt/action-tmate@v3
+        uses: mxschmitt/action-tmate@v3.19
         with:
           detached: true
       - uses: actions/checkout@v4

.github/workflows/update_coc.yml

@@ -4,12 +4,6 @@ permissions: read-all
 
 on:
   workflow_dispatch:
-    inputs:
-      debug:
-        description: 'Open ssh debug session.'
-        required: true
-        default: false
-        type: boolean
   # Run every Sunday at midnight UTC (00:00) - triggered by webhook?
   schedule:
     - cron: '0 0 * * SUN'
@@ -25,16 +19,6 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Install Emacs
-        if: ${{ github.event.inputs.debug == 'true' }}
-        run: |
-          sudo apt install emacs
-      - name: Setup tmate session
-        if: ${{ github.event.inputs.debug == 'true' }}
-        uses: mxschmitt/action-tmate@v3
-        with:
-          detached: true
-        timeout-minutes: 60
       - name: Checkout repository
         uses: actions/checkout@v4