Skip to content

Update actions version comments#971

Merged
vy merged 1 commit intoapache:release-2.xfrom
marcwrobel:fix-actions-versions
Jul 25, 2022
Merged

Update actions version comments#971
vy merged 1 commit intoapache:release-2.xfrom
marcwrobel:fix-actions-versions

Conversation

@marcwrobel
Copy link
Copy Markdown
Contributor

@vy vy merged commit bcf34fe into apache:release-2.x Jul 25, 2022
@vy
Copy link
Copy Markdown
Member

vy commented Jul 25, 2022

@marcwrobel, thanks so much for the explanation and fixes, much appreciated! 🙏

It is pretty fragile to manually manage these comments ourselves, yet having commit hashes is a security best-practice. Do you know of a way to make dependabot take care of this for us?

@marcwrobel marcwrobel deleted the fix-actions-versions branch July 25, 2022 19:44
@marcwrobel
Copy link
Copy Markdown
Contributor Author

@vy, unfortunately I don't. I have to amend dependabot PR each time there is a version upgrade.

@marcwrobel
Copy link
Copy Markdown
Contributor Author

This was referenced Dec 19, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants