Skip to content

Pin GitHub Actions to immutable releases - #7

Merged
slepp merged 1 commit into
masterfrom
copilot/pin-actions-release-v1
Aug 3, 2026
Merged

Pin GitHub Actions to immutable releases#7
slepp merged 1 commit into
masterfrom
copilot/pin-actions-release-v1

Conversation

@slepp

@slepp slepp commented Aug 3, 2026

Copy link
Copy Markdown
Owner

Summary

  • pin every GitHub Action to the full SHA of its latest release
  • retain version comments for readability
  • add weekly Dependabot updates for GitHub Actions

Validation

  • all workflow uses references are full 40-character SHAs
  • pinned SHAs match the latest published action releases
  • workflow and Dependabot YAML parse successfully
  • make test

@slepp
slepp merged commit def6e54 into master Aug 3, 2026
4 checks passed
@slepp
slepp deleted the copilot/pin-actions-release-v1 branch August 3, 2026 00:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant