Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Pin third party github actions to full commit SHA #13308

Open
ttmchiou opened this issue Sep 30, 2024 · 0 comments
Open

Pin third party github actions to full commit SHA #13308

ttmchiou opened this issue Sep 30, 2024 · 0 comments
Labels
feature-request External feature request gh-workflow infra-ci infrastructure and/or CI changes P2

Comments

@ttmchiou
Copy link
Contributor

Keep actions as an immutable release so we prevent risks of of bad actors adding backdoors via said actions' repositroy
@ttmchiou ttmchiou added infra-ci infrastructure and/or CI changes feature-request External feature request P1 P2 and removed P1 labels Sep 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
feature-request External feature request gh-workflow infra-ci infrastructure and/or CI changes P2
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@tt-rkim @ttmchiou