Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SECREV-2969: pin the action version using a full length SHA #334

Merged
merged 2 commits into from
Aug 23, 2023
Merged

SECREV-2969: pin the action version using a full length SHA #334

merged 2 commits into from
Aug 23, 2023

Conversation

juanjjaramillo
Copy link
Contributor

Which problem is this PR solving?

Security compliance: SECREV-2969

Short description of the changes

Pin third party action version using a full length SHA to meet security standards.

Type of change

Please delete options that are not relevant.

  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Security fix
  • New feature / enhancement (non-breaking change which adds functionality)
  • Bug fix (non-breaking change which fixes an issue)
  • This change requires a documentation update

New Tests?

Please describe the new tests that were added (if applicable).

  • This change requires changes in testing:
    • unit tests
    • e2e tests

Checklist:

  • Add changelog entry following the contributing guide
  • Tests have been added
  • Documentation has been updated

@juanjjaramillo juanjjaramillo marked this pull request as ready for review August 23, 2023 19:33
@juanjjaramillo juanjjaramillo requested a review from a team August 23, 2023 19:33
@svetlanabrennan svetlanabrennan merged commit 79154c2 into main Aug 23, 2023
15 checks passed
@svetlanabrennan svetlanabrennan deleted the juanjjaramillo/secrev-2969 branch August 23, 2023 20:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@svetlanabrennan svetlanabrennan svetlanabrennan approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@juanjjaramillo @svetlanabrennan