Skip to content

Hash pin GitHub Actions#307

Open
hugovk wants to merge 1 commit intopython:mainfrom
hugovk:hash-pin-gha
Open

Hash pin GitHub Actions#307
hugovk wants to merge 1 commit intopython:mainfrom
hugovk:hash-pin-gha

Conversation

@hugovk
Copy link
Copy Markdown
Member

@hugovk hugovk commented Apr 24, 2026

Yet another compromise via unpinned GitHub Actions: https://socket.dev/blog/bitwarden-cli-compromised

Let's hash-pin GHA for our PyPI packages.

Done via uvx gha-update.


📚 Documentation preview 📚: https://python-docs-theme-previews--307.org.readthedocs.build/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant