Skip to content

GHA: Harden workflows - #1231

Merged
bossinc merged 1 commit into
mainfrom
andreas/gha-harden
Apr 29, 2025
Merged

GHA: Harden workflows#1231
bossinc merged 1 commit into
mainfrom
andreas/gha-harden

Conversation

@aangelisc

Copy link
Copy Markdown
Collaborator

Fixing a bunch of issues reported by zizmor.

  • Fix template injection issues.
  • Pin third-party GitHub actions to specific SHAs. Excluding GitHub owned actions.
  • Appropriately set permissions in workflows.
  • Improve safety of checkout action.

@aangelisc
aangelisc requested a review from a team as a code owner April 29, 2025 14:20
@aangelisc
aangelisc requested a review from adamyeats April 29, 2025 14:20
@bossinc
bossinc merged commit 7bfce72 into main Apr 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants