sentry-java icon indicating copy to clipboard operation
sentry-java copied to clipboard

pin non-verified GH actions

Open marandaneto opened this issue 4 years ago • 2 comments

Eg https://github.com/getsentry/sentry-java/pull/1440/files#r619501561

worth checking on other non-verified actions too

marandaneto avatar Apr 26 '21 08:04 marandaneto

Checking if it's verified: image

If it's not verified, we have two options; Either fork the action to getsentry/... or pin to the specific commit hash. Otherwise remove the GHA.

bruno-garcia avatar Jun 09 '21 14:06 bruno-garcia

This might help: https://github.com/sethvargo/ratchet

adinauer avatar Jun 08 '22 15:06 adinauer