Ed-Fi-Exchange-OSS / Leadership-Profile

Apache License 2.0

2 stars 2 forks source link

Github Actions Commit Hashes #154

Open stephenfuqua opened 1 month ago

stephenfuqua commented 1 month ago

Jira Description

[https://github.com/Ed-Fi-Exchange-OSS/Leadership-Profile/blob/main/.github/workflows/publish.yml]

*Note from Stephen Fuqua:

Change the actions to use commit hashes instead of version tags? Since these actions are formally from GitHub they are relatively safe, unlike third party actions. However, we want to use commit hashes on a consistent basis for best security.

Jira Metadata

Key: LP-39 Epic: n/a Created: 2021-02-04T10:42:09.000-0600 Reporter: Yogiraj Aradhye

stephenfuqua commented 1 month ago

Jira Comment

[~douglasloyo] and [~User16360602429401097730] Headspring created this but I'm not sure if there is any work pending. Feel free to close it if nothing else needs to be done. We will be using the same repo, ping me if you need anything from me.

Jira Metadata

Created: 2022-05-12T16:44:25.320-0500 Commenter: Itzel Torres [Contractor] [X]