Skip to content

ci: pin actions and base image to immutable digests - #246

Open
marquiz wants to merge 1 commit into
squat:mainfrom
marquiz:devel/ci-action-digests
Open

marquiz wants to merge 1 commit into
squat:mainfrom
marquiz:devel/ci-action-digests

Conversation

@marquiz

@marquiz marquiz commented Oct 24, 2026 •

Copy link
Copy Markdown
Contributor

Pin to digest to mitigate supply chain attacks. Dependabot continues to work as before.

@marquiz
marquiz force-pushed the devel/ci-action-digests branch from 2eea2b2 to 41c67ed Compare October 24, 2026 15:37
Pin to digest to mitigate supply chain attacks. Dependabot continues to
work as before.

Signed-off-by: Markus Lehtonen <knaeaepae@gmail.com>
@marquiz
marquiz force-pushed the devel/ci-action-digests branch from 41c67ed to b687e8f Compare November 9, 2026 17:19
@marquiz

marquiz commented Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Rebased

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant