Skip to content

ci: use sha pinning to mitigate#613

Merged
Watson1978 merged 1 commit intofluent:1.0from
kenhys:ci-sha-pinning
Mar 4, 2026
Merged

ci: use sha pinning to mitigate#613
Watson1978 merged 1 commit intofluent:1.0from
kenhys:ci-sha-pinning

Conversation

@kenhys
Copy link
Contributor

@kenhys kenhys commented Mar 4, 2026

Lower risk about supply chain attack even though matched tag was compromised.

Lower risk about supply chain attack even though matched tag was compromised.

Signed-off-by: Kentaro Hayashi <hayashi@clear-code.com>
@kenhys kenhys requested a review from Watson1978 March 4, 2026 08:08
Copy link
Contributor

@Watson1978 Watson1978 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍🏻

@Watson1978 Watson1978 merged commit 5e91743 into fluent:1.0 Mar 4, 2026
2 checks passed
@kenhys kenhys deleted the ci-sha-pinning branch March 4, 2026 08:12
@kenhys kenhys restored the ci-sha-pinning branch March 4, 2026 08:19
@kenhys kenhys deleted the ci-sha-pinning branch March 4, 2026 08:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants