Update docker workflows#673
Conversation
ℹ️ Modified WorkflowsThis pull request contains modified workflow files and no preview will be created. Workflow files modified:
If this is not from a trusted source, please inspect the changes for any malicious content. |
| steps.validate-org-workflow.outputs.is_valid == 'false' | ||
| ) | ||
| uses: carpentries/create-pull-request@main | ||
| uses: peter-evans/create-pull-request@v7 |
There was a problem hiding this comment.
Should this pin a specific commit hash? My understanding is that it was forked in the carpentries to ensure no malicious updates could be pushed to this action used across all Carpentries organizations.
There was a problem hiding this comment.
We could! I would definitely prefer that than managing our own fork of third party actions.
|
@Bisaloo I've updated these workflows to fix a range of recent issues, but they currently require a test branch of the carpentries/actions. As a result if everything now works as it should, then we'll need to do another update to use the main actions once my changes have been tested and merged in. |
This PR updates the sandpaper GHA workflows to new versions which:
carpentries/actionsinstead