Backport of SEC-090: Automated trusted workflow pinning (2024-06-03) into release/0.16.x #4862
Conversation
|
|
|
Thank you for your submission! We require that all contributors sign our Contributor License Agreement ("CLA") before we can accept the contribution. Read and sign the agreement Learn more about why HashiCorp requires a CLA and what the CLA includes temp seems not to be a GitHub user. Have you signed the CLA already but the status is still pending? Recheck it. |
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com> (cherry picked from commit 1a2127a)
moduli
force-pushed
the
backport/tsccr-auto-pinning/trusted/2024-06-03/luckily-cheerful-seal
branch
from
e951237
to
99f422a
Compare
|
Database schema diff between To understand how these diffs are generated and some limitations see the FunctionsUnchanged TablesUnchanged ViewsUnchanged TriggersUnchanged IndexesUnchanged ConstraintsUnchanged Foreign Key ConstraintsUnchanged |
moduli
deleted the
backport/tsccr-auto-pinning/trusted/2024-06-03/luckily-cheerful-seal
branch
Backport
This PR is auto-generated from #4858 to be assessed for backporting due to the inclusion of the label backport/0.16.x.
WARNING automatic cherry-pick of commits failed. Commits will require human attention.
The below text is copied from the body of the original PR.
Bumping GitHub Actions version to latest TSCCR release.
.github/workflows/actionlint.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes).github/workflows/build.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes)actions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes)actions/checkoutfromv4.1.4tov4.1.6(release notes)actions/checkoutfromv4.1.4tov4.1.6(release notes)actions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes)actions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes)actions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes)actions/checkoutfromv4.1.4tov4.1.6(release notes).github/workflows/enos-fmt.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes).github/workflows/enos-run.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes)actions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes)actions/checkoutfromv4.1.4tov4.1.6(release notes).github/workflows/fuzz.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes).github/workflows/linting.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes).github/workflows/make-gen-delta.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes).github/workflows/schema-diff.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes).github/workflows/security-scan.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes)actions/checkoutfromv4.1.4tov4.1.6(release notes)github/codeql-action/upload-sariffromcodeql-bundle-v2.17.1tocodeql-bundle-v2.17.3(release notes).github/workflows/test-ci-bootstrap-oss.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes).github/workflows/test-ci-cleanup-oss.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes).github/workflows/test-cli-ui_oss.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes).github/workflows/test-race.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes)actions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes)actions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes).github/workflows/test-sql.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes).github/workflows/test.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes)actions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes)actions/checkoutfromv4.1.4tov4.1.6(release notes)actions/setup-gofromv5.0.0tov5.0.1(release notes).github/workflows/trigger-merge-to-downstream.ymlactions/checkoutfromv4.1.4tov4.1.6(release notes)This PR was auto-generated by security-tsccr/actions/runs/9328086659
You can alter the configuration of this automation via the hcl config in security-tsccr/automation
This PR can be regenerated by dispatching the GitHub workflow Pin Action Refs. Please reach out to #team-prodsec if you have any questions.