Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Use commit SHA instead of branch name for third-party actions #625

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Use commit SHA instead of branch name for third-party actions #625

wants to merge 1 commit into from

Commits on Jan 23, 2023

  1. Use commit SHA instead of branch name for third-party actions 

    Hi!
Following the [GH Action Security Hardening](https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions) guide we should use the commit SHA instead of the `branch` or `tag` for any third-party untrusted action.
    @andreaTP
    andreaTP authored Jan 23, 2023
    Configuration menu
    Copy the full SHA
    a767145 View commit details
    Browse the repository at this point in the history