Skip to content

chore: Update and pin all GHA actions#777

Merged
mjameswh merged 1 commit intomainfrom
pin-gha-actions
Apr 18, 2026
Merged

chore: Update and pin all GHA actions#777
mjameswh merged 1 commit intomainfrom
pin-gha-actions

Conversation

@mjameswh
Copy link
Copy Markdown
Contributor

@mjameswh mjameswh commented Apr 17, 2026

What changed

  • Bump all GitHub Actions workflows to use latest "safe" releases.
    "Safe" is defined as the latest published release that is at least 2 weeks old (cooldown period).
  • Pin all GHA actions usage to full SHA1, with a version comment.

Why

  • Improved security.

@mjameswh mjameswh requested review from a team, antmendoza and tsurdilo as code owners April 17, 2026 23:16
@mjameswh mjameswh merged commit 0a4092d into main Apr 18, 2026
10 checks passed
@mjameswh mjameswh deleted the pin-gha-actions branch April 18, 2026 00:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants