redis icon indicating copy to clipboard operation
redis copied to clipboard

pinned GitHub Actions

Open MadsRC opened this issue 6 months ago • 2 comments

This PR implements pinning for GitHub Actions as used in this repository. Pinning GitHub Actions is a best practice recommended by GitHub as pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release.

Not pinning your GitHub Actions exposes you to supply chain attacks, as was recently the case with the tj-actions/changed-files action.

The versions that I've pinned is the same versions that is currently in use by the repository.

MadsRC avatar May 27 '25 07:05 MadsRC

CLA assistant check
All committers have signed the CLA.

CLAassistant avatar May 27 '25 07:05 CLAassistant

:tada: Snyk checks have passed. No issues have been found so far.

:white_check_mark: security/snyk check is complete. No issues have been found. (View Details)

:white_check_mark: license/snyk check is complete. No issues have been found. (View Details)

snyk-io[bot] avatar May 27 '25 07:05 snyk-io[bot]