Skip to content

ci: pin GitHub Actions to commit SHAs#211

Merged
rohankmr414 merged 1 commit intomainfrom
workspace/sha-pinning
Mar 24, 2026
Merged

ci: pin GitHub Actions to commit SHAs#211
rohankmr414 merged 1 commit intomainfrom
workspace/sha-pinning

Conversation

@rohankmr414
Copy link
Copy Markdown
Member

Summary

  • Pin all public GitHub Action references to their immutable commit SHAs
  • Original version tags preserved as inline comments for maintainability
  • Prevents supply chain attacks via mutable tag references

Test plan

  • Verify CI workflows still trigger and run correctly
  • Spot-check a few pinned SHAs match their expected tags

🤖 Generated with Claude Code

Replace mutable tag references with immutable commit SHAs across
workflow files. Original tags are preserved as inline comments.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@github-actions
Copy link
Copy Markdown

Code Coverage

Package Line Rate Health
github.com/hasura/ndc-codegen-example 98%
github.com/hasura/ndc-codegen-example/functions 63%
github.com/hasura/ndc-codegen-example/types/arguments 43%
github.com/hasura/ndc-codegen-example/types 33%
github.com/hasura/ndc-sdk-go/v2/cmd/hasura-ndc-go/command/internal 84%
github.com/hasura/ndc-sdk-go/v2/cmd/hasura-ndc-go/command 46%
github.com/hasura/ndc-sdk-go/v2/cmd/hasura-ndc-go/version 62%
github.com/hasura/ndc-sdk-go/v2/connector 67%
github.com/hasura/ndc-sdk-go/v2/credentials 75%
github.com/hasura/ndc-sdk-go/v2/example/reference 54%
github.com/hasura/ndc-sdk-go/v2/ndctest 68%
github.com/hasura/ndc-sdk-go/v2/scalar 90%
github.com/hasura/ndc-sdk-go/v2/schema 23%
github.com/hasura/ndc-sdk-go/v2/utils/compression 67%
github.com/hasura/ndc-sdk-go/v2/utils 53%
Summary 47% (12445 / 26712)

Minimum allowed line rate is 40%

@rohankmr414 rohankmr414 merged commit 74695a7 into main Mar 24, 2026
2 checks passed
@rohankmr414 rohankmr414 deleted the workspace/sha-pinning branch March 24, 2026 08:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants