Skip to content

fix: pin outdated GitHub Actions versions in CI workflows#2552

Merged
rewtd merged 2 commits intoOWASP:masterfrom
Adarshkumar0509:fix/pin-github-actions-versions
Mar 9, 2026
Merged

fix: pin outdated GitHub Actions versions in CI workflows#2552
rewtd merged 2 commits intoOWASP:masterfrom
Adarshkumar0509:fix/pin-github-actions-versions

Conversation

@Adarshkumar0509
Copy link
Contributor

Fixes #2542

Changes:

  • Updated smoke-tests.yaml: actions/checkout
    v6.0.1 → v6.0.2
  • Updated sbom-generate.yml: actions/checkout
    @v4 → v6.0.2 (pinned)
  • Updated sbom-generate.yml: actions/setup-node
    @v4 → v6.2.0 (pinned)

Note: run-tests-generate-output.yaml was already
updated to v6.0.2 in master.

@Adarshkumar0509
Copy link
Contributor Author

@rewtd and @sydseter this pr is ready for review. thanks for assigning to me.

Copy link
Collaborator

@rewtd rewtd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Test failing due to coverage. Work is in progress to correct that.

@rewtd rewtd merged commit 9eda528 into OWASP:master Mar 9, 2026
8 of 9 checks passed
@Adarshkumar0509
Copy link
Contributor Author

Thank you for the review and merge @rewtd! Regarding the coverage issue I've been noticing this for a while. I'd be happy to add more tests to help reach the 85% threshold. Would that be a good area to contribute to?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Maintenance: Pin outdated GitHub Actions versions in CI workflows for supply chain security

2 participants