Skip to content

ci: pin GitHub Actions to commit SHAs - #56

Merged
tbaur merged 1 commit into
mainfrom
ci/pin-action-shas
Sep 29, 2026
Merged

tbaur merged 1 commit into
mainfrom
ci/pin-action-shas

Conversation

@tbaur

@tbaur tbaur commented Sep 29, 2026

Copy link
Copy Markdown
Owner

Summary

  • Pin checkout, setup-python, codecov, and CodeQL in the test, lint, and CodeQL workflows to the commits their tags currently point at.
  • A retargeted tag would otherwise change what runs, including the CodeQL job that can upload security results.

Test plan

  • Tests, lint, and CodeQL pass on this pull request

Tags can be retargeted. The test, lint, and CodeQL workflows now pin the commits those tags currently point at.
@tbaur
tbaur merged commit 18fd732 into main Sep 29, 2026
7 checks passed
@tbaur
tbaur deleted the ci/pin-action-shas branch September 29, 2026 05:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant