SECREV-2969: pin the action version using a full length SHA (#334)

* SECREV-2969: pin the action version using a full length SHA * Update CHANGELOG.md
newrelic · Aug 23, 2023 · 79154c2 · 79154c2
1 parent 7bbb4b9
commit 79154c2
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/.github/workflows/release-integration.yml b/.github/workflows/release-integration.yml
@@ -100,7 +100,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Notify failure via Slack
-        uses: archive/github-actions-slack@v2
+        uses: archive/github-actions-slack@d9dae40827adf93bddf939db6552d1e392259d7d
         with:
           slack-bot-user-oauth-access-token: ${{ secrets.K8S_AGENTS_SLACK_TOKEN }}
           slack-channel: ${{ secrets.K8S_AGENTS_SLACK_CHANNEL }}

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Unreleased
 
+### security
+- Meet internal security standards @jjaramillo [#334](https://github.com/newrelic/k8s-metadata-injection/pull/334)
+
 ## 1.11.0
 ## What's Changed
 - Add configuration of certmanager durations @cdobbyn [#323](https://github.com/newrelic/k8s-metadata-injection/pull/323)