Skip to content

fix: pin action to official source instead of bash execution#835

Merged
lwasser merged 2 commits intopyOpenSci:mainfrom
willingc:action-pin
Mar 16, 2026
Merged

fix: pin action to official source instead of bash execution#835
lwasser merged 2 commits intopyOpenSci:mainfrom
willingc:action-pin

Conversation

@willingc
Copy link
Collaborator

Update action to conform to security practice.

@willingc willingc requested a review from lwasser as a code owner March 14, 2026 02:33
bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
./actionlint -color -ignore SC2129
shell: bash
uses: rhysd/actionlint@393031adb9afb225ee52ae2ccd7a5af5525e03e8 # v1.7.11
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

so much better! thank you again!!

@lwasser lwasser merged commit 51e447d into pyOpenSci:main Mar 16, 2026
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants