Skip to content

Github actions hardening - reference by-hash instead of by-tag #875

@salasberryfin

Description

@salasberryfin

Description

This is a copy of the Turtles issue (already solved).

References to third-party actions should use hash instead of tags which guarantees that CI uses immutable revisions.

Metadata

Metadata

Assignees

No one assigned

    Labels

    area/ciIssues or PRs related to CIarea/securityIssues or PRs related to securitykind/enhancementNew feature or request

    Type

    No fields configured for Task.

    Projects

    Status

    Done

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions