github / automatic-contrib-prs

Automatically open a pull request for repositories that have no CONTRIBUTING.md file

MIT License

23 stars 11 forks source link

chore: use SHAs in GitHub Actions and pull_request_target for releases #76

Closed jmeridth closed 3 months ago

jmeridth commented 3 months ago

Pull Request

Proposed Changes

[x] replace tags in GitHub Actions with SHAs (tags are movable, SHAs are not, more secure)
[x] add pull_request_target to release GitHub Action so we have access to fork PR labels

Readiness Checklist

Author/Contributor

[x] If documentation is needed for this change, has that been included in this pull request
[x] run make lint and fix any issues that you have introduced
[x] run make test and ensure you have test coverage for the lines you are introducing

Reviewer

[x] Label as either bug, documentation, enhancement, infrastructure, maintenance or breaking