Skip to content

Set commit sha instead of version of github actions#825

Merged
tpadioleau merged 1 commit intomainfrom
gh-actions-versions-to-sha
Apr 15, 2025
Merged

Set commit sha instead of version of github actions#825
tpadioleau merged 1 commit intomainfrom
gh-actions-versions-to-sha

Conversation

@tpadioleau
Copy link
Copy Markdown
Member

This PR aims to harden security following github recommendations

Pin actions to a full length commit SHA

Note that as a consequence, this will increase the number of dependabot PRs.

@tpadioleau tpadioleau self-assigned this Apr 15, 2025
@tpadioleau tpadioleau merged commit 4d43de7 into main Apr 15, 2025
71 checks passed
@tpadioleau tpadioleau deleted the gh-actions-versions-to-sha branch April 15, 2025 17:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant