Skip to content

Pin github actions to exact commit hash#2494

Merged
xgouchet merged 1 commit into
developfrom
xgouchet/pin_github_actions
Jan 29, 2025
Merged

Pin github actions to exact commit hash#2494
xgouchet merged 1 commit into
developfrom
xgouchet/pin_github_actions

Conversation

@xgouchet

Copy link
Copy Markdown
Contributor

What does this PR do?

Pin Github actions to exact hashes for repo security.

@xgouchet
xgouchet requested review from a team as code owners January 28, 2025 10:23
@xgouchet
xgouchet force-pushed the xgouchet/pin_github_actions branch from 7542ea4 to 83d7745 Compare January 28, 2025 10:25
0xnm
0xnm previously approved these changes Jan 28, 2025
Comment thread .github/workflows/codeql-analysis.yml Outdated

- name: Setup Gradle
uses: gradle/actions/setup-gradle@v3
uses: gradle/actions/setup-gradle@d9c87d481d55275bb5441eef3fe0e46805f9ef70 # v3/5/0

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
uses: gradle/actions/setup-gradle@d9c87d481d55275bb5441eef3fe0e46805f9ef70 # v3/5/0
uses: gradle/actions/setup-gradle@d9c87d481d55275bb5441eef3fe0e46805f9ef70 # v3.5.0

@xgouchet
xgouchet force-pushed the xgouchet/pin_github_actions branch from 83d7745 to 31b0be0 Compare January 28, 2025 10:30
@xgouchet
xgouchet requested a review from 0xnm January 28, 2025 10:32
@codecov-commenter

codecov-commenter commented Jan 28, 2025

Copy link
Copy Markdown

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 69.90%. Comparing base (63748fd) to head (31b0be0).
Report is 6 commits behind head on develop.

Additional details and impacted files
@@             Coverage Diff             @@
##           develop    #2494      +/-   ##
===========================================
- Coverage    70.01%   69.90%   -0.11%     
===========================================
  Files          788      788              
  Lines        29646    29646              
  Branches      4962     4962              
===========================================
- Hits         20755    20722      -33     
- Misses        7530     7545      +15     
- Partials      1361     1379      +18     

see 32 files with indirect coverage changes

@xgouchet
xgouchet merged commit 6c54695 into develop Jan 29, 2025
@xgouchet
xgouchet deleted the xgouchet/pin_github_actions branch January 29, 2025 07:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants