Skip to content

Conversation

v1v
Copy link
Member

@v1v v1v commented Mar 31, 2025

Reverts #2236

I prefer that we don't pin versions coming from the actions for now.

Let's agree on this. At the moment, it requires some manual actions in our end to validate change for something we follow the GH security hardening:

@v1v v1v requested review from a team and kruskall March 31, 2025 15:13
Copy link
Member

@kruskall kruskall left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

not all of these are first party action

@v1v
Copy link
Member Author

v1v commented Mar 31, 2025

not all of these are first party action

I see two actions?

  • actions-ecosystem
  • precommit

I'll pin them in a follow-up. I think the other ones are either coming from actions or the elastic org.

@v1v v1v requested a review from kruskall March 31, 2025 20:21
@v1v v1v merged commit 5d9a461 into main Apr 1, 2025
123 checks passed
@v1v v1v deleted the revert-2236-feat/pin-actions branch April 1, 2025 10:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants