chore(deps): update launchdarkly/gh-actions digest to 5adb11f#1170
Conversation
|
@launchdarkly/js-sdk-common size report |
|
@launchdarkly/js-client-sdk size report |
|
@launchdarkly/browser size report |
|
@launchdarkly/js-client-sdk-common size report |
| run: yarn workspaces focus ${{ inputs.workspace_name }} | ||
|
|
||
| - uses: launchdarkly/gh-actions/actions/release-secrets@bbbbbda684f500766264e7fe327668094ba83d1c | ||
| - uses: launchdarkly/gh-actions/actions/release-secrets@5adb11fd6953e1bc35d9cf1fc1b4374c464e3a8b |
There was a problem hiding this comment.
This SHA isn't for a release of release-secrets, but is just main. Where the original SHA is a release.
renovate
Bot
force-pushed
the
renovate/launchdarkly-gh-actions-digest
branch
from
f7122ad to
afee76a
Compare
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
| ssm_parameter_pairs: '/sdk/common/hello-apps/client-key = LAUNCHDARKLY_CLIENT_SIDE_ID' | ||
|
|
||
| - uses: launchdarkly/gh-actions/actions/release-secrets@bbbbbda684f500766264e7fe327668094ba83d1c | ||
| - uses: launchdarkly/gh-actions/actions/release-secrets@5adb11fd6953e1bc35d9cf1fc1b4374c464e3a8b |
There was a problem hiding this comment.
Action pinned to non-release main branch commit
Medium Severity
The digest 5adb11fd6953e1bc35d9cf1fc1b4374c464e3a8b resolves to an arbitrary main branch commit rather than a tagged release of launchdarkly/gh-actions/actions/release-secrets. Pinning to an unversioned commit means the action's behavior isn't tied to a stable, reviewed release, which undermines the supply-chain security guarantees that digest pinning is meant to provide. The original digest bbbbbda684f500766264e7fe327668094ba83d1c was a release SHA.
2 participants
This PR contains the following updates:
bbbbbda→5adb11fConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.