Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: nnichols/clojure-dependency-update-action
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v5
Choose a base ref
...
head repository: nnichols/clojure-dependency-update-action
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v6
Choose a head ref
  • 4 commits
  • 4 files changed
  • 3 contributors

Commits on Apr 1, 2023

  1. Add CODEOWNERS

    @nnichols
    nnichols committed Apr 1, 2023
    Configuration menu
    Copy the full SHA
    5d153d1 View commit details
    Browse the repository at this point in the history

Commits on May 25, 2023

  1. Configure Renovate (#19) 

    * Add renovate.json

* Update renovate.json

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Nick A Nichols <nichols1991@gmail.com>
    @renovate @nnichols
    renovate[bot] and nnichols authored May 25, 2023
    Configuration menu
    Copy the full SHA
    8bb88e7 View commit details
    Browse the repository at this point in the history

  2. MAINTENANCE MODE 

    This repository is now in maintenance-only mode.
    @nnichols
    nnichols authored May 25, 2023
    Configuration menu
    Copy the full SHA
    179b3d1 View commit details
    Browse the repository at this point in the history

Commits on Aug 12, 2024

  1. pin dependency image to SHA256 digest (#22) 

    Docker-based GitHub actions are built every time [1]. This means that if
the `nnichols/clojure-dependency-update-action:latest` image is
compromised, it could result in arbitrary code execution. Pinning the
image to its current SHA256 digest [2] removes that attack vector.

[1] https://docs.github.com/en/actions/creating-actions/about-custom-actions#docker-container-actions
[2] https://hub.docker.com/layers/nnichols/clojure-dependency-update-action/latest/images/sha256-06c47e969b386796a09f296d80af705c1d8b578cae41ebe018b08a0f657d4081?context=explore
    @listx
    listx authored Aug 12, 2024
    Configuration menu
    Copy the full SHA
    8c317ef View commit details
    Browse the repository at this point in the history
Loading