Skip to content

Conversation

@MishaKav
Copy link
Collaborator

@MishaKav MishaKav commented Oct 9, 2025

✨ PR Description

Purpose: Update GitHub Actions references to use commit SHA values with version comments for improved stability and security.
Main changes:

  • Replaced version tags with exact commit SHAs for all GitHub Actions references
  • Added version comments to each action reference for improved traceability
  • Standardized format across all action dependencies for consistent implementation

CHANGELOG

🔧 Improvements

  • Enhanced security by pinning all action dependencies to specific commit hashes

🐛 Bug Fixes

  • Improved error message clarity when YAML syntax errors occur

Generated by LinearB AI and added by gitStream.
AI-generated content may contain inaccuracies. Please verify before using. We'd love your feedback! 🚀

@MishaKav MishaKav added the auto-deploy when exists in PR, will auto make release and auto deploy to prod label Oct 9, 2025
Copy link

@orca-security-us orca-security-us bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Orca Security Scan Summary

Status Check Issues by priority
Passed Passed Infrastructure as Code high 0   medium 0   low 0   info 0 View in Orca
Passed Passed SAST high 0   medium 0   low 0   info 0 View in Orca
Passed Passed Secrets high 0   medium 0   low 0   info 0 View in Orca
Passed Passed Vulnerabilities high 0   medium 0   low 0   info 0 View in Orca

Copy link
Contributor

@gitstream-cm gitstream-cm bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✨ PR Review

LGTM

Generated by LinearB AI and added by gitStream.
AI-generated content may contain inaccuracies. Please verify before using. We'd love your feedback! 🚀

using: composite
steps:
- uses: actions/setup-node@v5
- uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

how is this hash created? and why?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it's the commit SHA of the same version, it's best practice to pin version to commit sha
https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#example-using-versioned-actions

Copy link
Collaborator

@yeelali14 yeelali14 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@MishaKav MishaKav merged commit 9780615 into develop Oct 9, 2025
13 checks passed
@MishaKav MishaKav deleted the LINBEE-19723-gitstream-uses-version-tag-instead-of-sha branch October 9, 2025 12:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1 min review 1 Unresolved Thread(s) auto-deploy when exists in PR, will auto make release and auto deploy to prod

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants