ci: miscellaneous improvements to update_advisory by andrewpollock · Pull Request #3 · google/chromium-policy-vulnfeed

andrewpollock · 2025-03-20T04:20:10Z

This

follows recommended best practice and pins the actions used by their commit hash (and updates to the latest available versions)
uses the latest available version of the Go compiler
streamlines the execution of the Go binary by simply using go run
removes an errant character from the configured git user.email string

This - follows [recommended best practice](https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions) and pins the actions used by their commit hash (and updates to the latest available versions) - uses the latest available version of the Go compiler - streamlines the execution of the Go binary by simply using `go run` - removes an errant character from the configured git `user.email` string

andrewpollock · 2025-03-20T04:20:50Z

You may wish to consider implementing Renovate to ensure that the dependencies of this workflow are kept up to date

vsutedjo merged commit 823f2b0 into google:main Mar 20, 2025
2 checks passed

Provide feedback