Skip to content

ci: pin GitHub Actions to commit SHAs#118

Open
rohankmr414 wants to merge 1 commit intomainfrom
workspace/sha-pinning
Open

ci: pin GitHub Actions to commit SHAs#118
rohankmr414 wants to merge 1 commit intomainfrom
workspace/sha-pinning

Conversation

@rohankmr414
Copy link
Copy Markdown
Member

Summary

  • Pin all public GitHub Action references to their immutable commit SHAs
  • Original version tags preserved as inline comments for maintainability
  • Prevents supply chain attacks via mutable tag references

Test plan

  • Verify CI workflows still trigger and run correctly
  • Spot-check a few pinned SHAs match their expected tags

🤖 Generated with Claude Code

Replace mutable tag references with immutable commit SHAs across
workflow files. Original tags are preserved as inline comments.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant