Skip to content

security: pin all GitHub Actions to commit SHAs with version comments#37

Merged
peterkir merged 2 commits intomainfrom
copilot/switch-github-actions-to-git-sha
Apr 3, 2026
Merged

security: pin all GitHub Actions to commit SHAs with version comments#37
peterkir merged 2 commits intomainfrom
copilot/switch-github-actions-to-git-sha

Conversation

@peterkir
Copy link
Copy Markdown
Collaborator

@peterkir peterkir commented Apr 3, 2026

  • Identify root causes of missing product artifacts
  • Fix features/example.rcp.feature.touchpoint/p2.inf — disable the chmod touchpoint instruction (per README guidance, should be disabled by default)
  • Fix build.sh — add pipefail to set -eo pipefail so Maven failures propagate through the tee pipe and are visible in CI

@peterkir peterkir force-pushed the copilot/switch-github-actions-to-git-sha branch from 5dbec13 to 42848c4 Compare April 3, 2026 10:31
@peterkir peterkir force-pushed the copilot/switch-github-actions-to-git-sha branch from a20d4c7 to cdc9eee Compare April 3, 2026 14:29
@peterkir peterkir merged commit 3ca3abc into main Apr 3, 2026
3 checks passed
@peterkir peterkir deleted the copilot/switch-github-actions-to-git-sha branch April 3, 2026 14:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants