Skip to content

Pin action versions used in GH workflow by SHA#596

Open
Rpinski wants to merge 1 commit intomasterfrom
pin-gh-actions
Open

Pin action versions used in GH workflow by SHA#596
Rpinski wants to merge 1 commit intomasterfrom
pin-gh-actions

Conversation

@Rpinski
Copy link
Member

@Rpinski Rpinski commented Oct 29, 2025

No description provided.

@christophwille
Copy link
Member

I know, security best practice yada yada. But I'd have no idea which version that hash represents.

@Rpinski
Copy link
Member Author

Rpinski commented Oct 31, 2025

That's true, I've added comments with tag names, Dependabot seems to update them automatically, if present. We will see.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants