Skip to content
This repository was archived by the owner on Mar 23, 2026. It is now read-only.

chore: pin GitHub Actions to full commit SHAs#2

Open
oli-sanders wants to merge 1 commit intomasterfrom
chore/pin-github-actions-to-sha
Open

chore: pin GitHub Actions to full commit SHAs#2
oli-sanders wants to merge 1 commit intomasterfrom
chore/pin-github-actions-to-sha

Conversation

@oli-sanders
Copy link
Copy Markdown

Summary

  • Pins all GitHub Actions to immutable commit SHAs instead of mutable tags
  • Prevents supply chain attacks where a compromised tag could inject malicious code
  • Dependabot will keep pinned SHAs up to date automatically

Test plan

  • Verify CI passes with pinned actions

Security hardening — pins all third-party actions to immutable
commit SHAs to prevent supply chain attacks via mutable tags.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant