Skip to content

ci: pin GitHub Actions to commit SHAs#86

Merged
rohankmr414 merged 1 commit intomainfrom
workspace/sha-pinning
Mar 24, 2026
Merged

ci: pin GitHub Actions to commit SHAs#86
rohankmr414 merged 1 commit intomainfrom
workspace/sha-pinning

Conversation

@rohankmr414
Copy link
Member

Summary

  • Pin all public GitHub Action references to their immutable commit SHAs
  • Original version tags preserved as inline comments for maintainability
  • Prevents supply chain attacks via mutable tag references

Test plan

  • Verify CI workflows still trigger and run correctly
  • Spot-check a few pinned SHAs match their expected tags

🤖 Generated with Claude Code

Replace mutable tag references with immutable commit SHAs across
workflow files. Original tags are preserved as inline comments.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@rohankmr414 rohankmr414 merged commit 938d389 into main Mar 24, 2026
7 of 8 checks passed
@rohankmr414 rohankmr414 deleted the workspace/sha-pinning branch March 24, 2026 08:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants