Skip to content

ci: pin GitHub Actions to commit SHAs#19

Open
rohankmr414 wants to merge 1 commit intomainfrom
workspace/sha-pinning
Open

ci: pin GitHub Actions to commit SHAs#19
rohankmr414 wants to merge 1 commit intomainfrom
workspace/sha-pinning

Conversation

@rohankmr414
Copy link
Member

Summary

  • Pin all public GitHub Action references to their immutable commit SHAs
  • Original version tags preserved as inline comments for maintainability
  • Prevents supply chain attacks via mutable tag references

Test plan

  • Verify CI workflows still trigger and run correctly
  • Spot-check a few pinned SHAs match their expected tags

🤖 Generated with Claude Code

Replace mutable tag references with immutable commit SHAs across
workflow files. Original tags are preserved as inline comments.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@rohankmr414 rohankmr414 requested a review from shahidhk March 24, 2026 08:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant