Skip to content

Pin GitHub Actions to SHA hashes#82

Merged
bgrozev merged 1 commit intomainfrom
pin-action-versions
Apr 16, 2026
Merged

Pin GitHub Actions to SHA hashes#82
bgrozev merged 1 commit intomainfrom
pin-action-versions

Conversation

@bgrozev
Copy link
Copy Markdown
Member

@bgrozev bgrozev commented Apr 16, 2026

Pin all GitHub Actions version tags to their corresponding commit SHA hashes for improved supply-chain security.

Original version tags are preserved as comments (e.g. # v4).

- claude-code-review.yml: actions/checkout@v4 -> 34e114876b0b11c390a56381ad16ebd13914f8d5
- claude-code-review.yml: anthropics/claude-code-action@v1 -> 5fb899572b81d2bb648d4d187173a2f423a9677c
- dh.yml: actions/checkout@v6 -> de0fac2e4500dabe0009e67214ff5f5447ce83dd
- dh.yml: actions/setup-node@v4 -> 49933ea5288caeca8642d1e84afbd3f7d6820020
- dh.yml: docker/login-action@v3 -> c94ce9fb468520275223c153574b00df6fe4bcc9
- dh.yml: docker/setup-qemu-action@v3 -> c7c53464625b32c7a7e944ae62b3e17d2b600130
- dh.yml: docker/setup-buildx-action@v3 -> 8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
- dh.yml: docker/build-push-action@v6 -> 10e90e3645eae34f1e60eeb005ba3a3d33f178e8
- test.yml: actions/checkout@v4 -> 34e114876b0b11c390a56381ad16ebd13914f8d5
- test.yml: actions/setup-node@v4 -> 49933ea5288caeca8642d1e84afbd3f7d6820020
@bgrozev bgrozev merged commit 6d7bada into main Apr 16, 2026
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants