Skip to content

Pin third-party GH actions#212

Merged
tjdevries merged 1 commit intomasterfrom
vincent+andre/pin-actions-sha
Mar 12, 2024
Merged

Pin third-party GH actions#212
tjdevries merged 1 commit intomasterfrom
vincent+andre/pin-actions-sha

Conversation

@evict
Copy link
Contributor

@evict evict commented Mar 12, 2024

As recommended by GitHub this PR adds pinning of third-party GitHub actions. We've briefly reviewed the contents of the action for any potential issues. See https://github.com/sourcegraph/security-issues/issues/377 for more information.

The SHA hash for the Nix action is for v26 which addresses a vulnerability.

@evict evict self-assigned this Mar 12, 2024
@tjdevries tjdevries merged commit d69f26f into master Mar 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants