Skip to content

Commit 5b64ad0

Browse files
fix(security): pin mkdocs-material version in pages workflow (#106)
## Summary Pins `mkdocs-material` to version 9.7.4 in the GitHub Pages deployment workflow to address Scorecard alert #27 (unpinned pip dependency). ### Changes - **pages.yml**: `pip install mkdocs-material` → `pip install mkdocs-material==9.7.4` ### Context Unpinned pip dependencies allow supply chain attacks where a compromised package version could be installed during CI. Pinning to a specific version ensures reproducible builds. Closes #99 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent fd2d3d7 commit 5b64ad0

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/pages.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
2828
with:
2929
python-version: '3.x'
30-
- run: pip install mkdocs-material
30+
- run: pip install mkdocs-material==9.7.4
3131
- run: mkdocs build --strict
3232
- uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
3333
- uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4

0 commit comments

Comments
 (0)