Skip to content

Pin moving third-party GitHub Actions references - #3455

Closed
adamtheturtle wants to merge 1 commit into
mainfrom
agent/issue-3376-pin-actions
Closed

Pin moving third-party GitHub Actions references#3455
adamtheturtle wants to merge 1 commit into
mainfrom
agent/issue-3376-pin-actions

Conversation

@adamtheturtle

Copy link
Copy Markdown
Member

Closes #3376.

What

  • Pin StephaneBour/actions-calver and jlumbroso/free-disk-space to full commit SHAs.
  • Retain comments showing the branches those SHAs were resolved from.

Why

Moving branch references can change without review and allow upstream changes to execute with workflow permissions.

Checks

  • uv run prek run --files .github/workflows/test.yml .github/workflows/release.yml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

The release workflow runs a third-party action from a moving branch

1 participant