exercism / go-test-runner

GNU Affero General Public License v3.0
15 stars 17 forks source link

CI: pin GitHub Actions workflows #110

Closed ErikSchierboom closed 9 months ago

ErikSchierboom commented 10 months ago

This PR updates GitHub Actions workflows to a specific version. This ensures that the workflow will always run the same code, which makes your build stable. It will also prevent a potential security issue where a tag could be replaced by a malicious commit without consumers being aware of it.

The PR updates each non-SHA based workflow reference with the SHA of the referenced version/tag, so the current behavior should not change.

See https://exercism.org/docs/building/github/gha-best-practices#h-pin-actions-to-shas for more information.

github-actions[bot] commented 10 months ago

Pull Request Test Coverage Report for Build 6864591962


Totals Coverage Status
Change from base Build 6863048637: 0.0%
Covered Lines: 422
Relevant Lines: 641

💛 - Coveralls