Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

chore: use commit sha for GitHub actions#15019

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Merged
matifali merged 2 commits intomainfromossf/use-hashe-for-github-actions
Oct 14, 2024

Conversation

matifali
Copy link
Member

Use specific commit SHAs for GitHub actions across various workflows to enhance reliability and reproducibility. This change ensures that actions run against a known version, reducing the risk of unexpected issues due to updates in the third-party action repositories.

This contributes to improving the score in#14879

Use specific commit SHAs for GitHub actions across various workflows to enhance reliability and reproducibility. This change ensures that actions run against a known version, reducing the risk of unexpected issues due to updates in the third-party action repositories.
Comment on lines -15 to -16
with:
version: 9.6
Copy link
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

removed to use the version frompackages.json

Copy link
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

we specifiedpnpm version 9.7 in package.json and 9.6 here, which was conflicting.
cc:@BrunoQuaresma@aslilac

BrunoQuaresma reacted with thumbs up emoji
@matifalimatifali changed the titlechore: update actions in GitHub workflows to specific commitschore: use commit sha for GitHub actionsOct 9, 2024
@matifalimatifali merged commit57a65c1 intomainOct 14, 2024
35 checks passed
@matifalimatifali deleted the ossf/use-hashe-for-github-actions branchOctober 14, 2024 15:49
@github-actionsgithub-actionsbot locked and limited conversation to collaboratorsOct 14, 2024
@matifalimatifali linked an issueOct 15, 2024 that may beclosed by this pull request
Sign up for freeto subscribe to this conversation on GitHub. Already have an account?Sign in.
Reviewers

@coadlercoadlercoadler approved these changes

@deansheatherdeansheatherAwaiting requested review from deansheather

@phorcys420phorcys420Awaiting requested review from phorcys420

Assignees

@matifalimatifali

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Pin all github workflow actions by hash
2 participants
@matifali@coadler

[8]ページ先頭

©2009-2025 Movatter.jp