Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Pin github actions using shas #6052

Merged
merged 4 commits into from
Jan 3, 2024

Commits on Jan 3, 2024

  1. Pin github actions using shas

    Dependabot should be able to update these and preserve the tag in the comment, as per: dependabot/dependabot-core#5951
    
    Workflows updated with: https://app.stepsecurity.io/secureworkflow
    
    Signed-off-by: Sunjay Bhatia <sunjayb@vmware.com>
    sunjayBhatia committed Jan 3, 2024
    Configuration menu
    Copy the full SHA
    95122cb View commit details
    Browse the repository at this point in the history
  2. The act10ns/slack v2.0.0 tag is not in the actual repo

    Changing to the v2 tag/commit to see if that lets the workflow run properly
    
    Signed-off-by: Sunjay Bhatia <sunjayb@vmware.com>
    sunjayBhatia committed Jan 3, 2024
    Configuration menu
    Copy the full SHA
    54c93db View commit details
    Browse the repository at this point in the history
  3. fix indent

    Signed-off-by: Sunjay Bhatia <sunjayb@vmware.com>
    sunjayBhatia committed Jan 3, 2024
    Configuration menu
    Copy the full SHA
    f1ffbd9 View commit details
    Browse the repository at this point in the history
  4. see if newer tag works

    Signed-off-by: Sunjay Bhatia <sunjayb@vmware.com>
    sunjayBhatia committed Jan 3, 2024
    Configuration menu
    Copy the full SHA
    2af6662 View commit details
    Browse the repository at this point in the history