search

cachix / install-nix-action

Installs Nix on GitHub Actions for the supported platforms: Linux and macOS.
Apache License 2.0
520 stars 80 forks source link

feat: Pin actions to hashes #201

Open l0b0 opened 10 months ago

l0b0 commented 10 months ago

Done with pin-github-action https://github.com/mheap/pin-github-action 1.8.0 using npx pin-github-action .github/workflows/*.yml, and then manually bumping the version tag to the relevant number.

This fixes the issue that it is common practice for GitHub Actions authors to move major tags when releasing new minor versions.

Dependabot supports updating in the same fashion, bumping the version
tag when updating the hash.