Skip to content

Commit 8b258c7

Browse files
XananasX7KiloClaw Security
andauthored
ci: pin GitHub Actions to full commit SHAs (#1116)
Pin unpinned action references to immutable commit SHAs. Version tags retained as inline comments. See: https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions Co-authored-by: KiloClaw Security <security@kiloclaw.ai>
1 parent caf87e6 commit 8b258c7

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

‎.github/workflows/ci.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,13 +27,13 @@ jobs:
2727

2828
steps:
2929
- name: Install Go
30-
uses: actions/setup-go@v5
30+
uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
3131
with:
3232
go-version: ${{ matrix.go-version }}
3333
check-latest: true
3434
cache: false
3535
- name: Checkout code
36-
uses: actions/checkout@v4
36+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3737
with:
3838
path: ${{ env.GOPATH }}/src/github.com/${{ github.repository }}
3939
- name: Test

0 commit comments

Comments
 (0)