Skip to content

ci: pin GitHub Actions to immutable commits - #3

Merged
SahirVhora merged 2 commits into
mainfrom
fix/pin-actions-20260830
Aug 31, 2026
Merged

SahirVhora merged 2 commits into
mainfrom
fix/pin-actions-20260830

Conversation

@SahirVhora

Copy link
Copy Markdown
Owner

Summary

  • pin every mutable action reference in 2 workflows to the current official commit behind its existing major tag
  • preserve action major versions and workflow behaviour
  • reduce supply-chain risk from movable tags

Files

  • .github/workflows/ci.yml
  • .github/workflows/deploy.yml

All SHAs were resolved from the official action repositories on 2026-08-30.

@SahirVhora
SahirVhora merged commit 11083a0 into main Aug 31, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant