Skip to content

Conversation

@G-Rath
Copy link
Contributor

@G-Rath G-Rath commented Oct 15, 2025

This will allow us to do releases easily with tags

runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@v2

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Release' step
Uses Step
uses 'step-security/harden-runner' with ref 'v2', not a pinned commit hash
- uses: actions/checkout@v4
with:
persist-credentials: false
- uses: ruby/setup-ruby@v1

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Release' step
Uses Step
uses 'ruby/setup-ruby' with ref 'v1', not a pinned commit hash
with:
ruby-version: '3.2'
bundler-cache: true
- uses: rubygems/release-gem@v1

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Release' step
Uses Step
uses 'rubygems/release-gem' with ref 'v1', not a pinned commit hash
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants