Skip to content

chore: pin GitHub Actions to commit SHAs#188

Open
akandic47 wants to merge 1 commit intomainfrom
chore/pin-gh-actions-sha-2026-04-09
Open

chore: pin GitHub Actions to commit SHAs#188
akandic47 wants to merge 1 commit intomainfrom
chore/pin-gh-actions-sha-2026-04-09

Conversation

@akandic47
Copy link
Copy Markdown
Contributor

Summary

  • Pin all GitHub Action references to immutable commit SHAs instead of mutable tags
  • Prevents supply chain attacks via tag poisoning (e.g. Trivy-style attacks)
  • Version comments preserved inline for auditability

Test plan

  • Verify CI passes with SHA-pinned actions

@lastperson lastperson force-pushed the chore/pin-gh-actions-sha-2026-04-09 branch from 5041586 to dab953e Compare April 13, 2026 09:07
Pin all action references to immutable commit SHAs to prevent
supply chain attacks via tag poisoning. Version comments preserved
for auditability.
@akandic47 akandic47 force-pushed the chore/pin-gh-actions-sha-2026-04-09 branch from 32f536e to 08a6833 Compare April 14, 2026 14:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants