Skip to content

Conversation

dacoburn
Copy link
Collaborator

Pin GitHub Actions to full-length commit SHAs for security compliance. Updates all workflow files to use SHA-pinned versions instead of tag references to prevent supply chain attacks and ensure reproducibility.

Public Changelog

N/A

@dacoburn dacoburn requested a review from a team as a code owner October 13, 2025 22:28
@dacoburn dacoburn requested review from cenobitedk and jdalton and removed request for a team October 13, 2025 22:28
@dacoburn dacoburn merged commit 06994cc into main Oct 13, 2025
5 of 6 checks passed
@dacoburn dacoburn deleted the doug/pin-action-versions branch October 13, 2025 22:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants