Sitelet https://github.com/transparency-dev/formats/pull/13
Skip to content

Pin GitHub actions to git hashes - #13

Merged
AlCutter merged 1 commit into
transparency-dev:mainfrom
AlCutter:pin_actions
Nov 30, 2022
Merged

AlCutter merged 1 commit into
transparency-dev:mainfrom
AlCutter:pin_actions

Conversation

@AlCutter

Copy link
Copy Markdown
Collaborator

Pin our GitHub Action configs to explicit git hashes.

This reduces the potential for compromised dependencies to undermine our own repo security.

@AlCutter
AlCutter requested a review from smeiklej November 28, 2022 14:40
@AlCutter
AlCutter requested a review from a team as a code owner November 28, 2022 14:40
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

Base: 100.00% // Head: 100.00% // No change to project coverage 👍

Coverage data is based on head (9d1c43a) compared to base (90eee30).
Patch has no changes to coverable lines.

Additional details and impacted files
@@            Coverage Diff            @@
##              main       #13   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            3         3           
  Lines           52        52           
=========================================
  Hits            52        52           

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.

@AlCutter
AlCutter merged commit 34660ba into transparency-dev:main Nov 30, 2022
@AlCutter
AlCutter deleted the pin_actions branch November 30, 2022 18:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants