hashicorp / terraform-cdk

Define infrastructure resources using programming constructs and provision them using HashiCorp Terraform
https://www.terraform.io/cdktf
Mozilla Public License 2.0
4.88k stars 455 forks source link

chore(deps): pin trusted workflows based on HashiCorp TSCCR #3729

Closed hashicorp-tsccr[bot] closed 2 months ago

hashicorp-tsccr[bot] commented 2 months ago

Bumping GitHub Actions version to latest TSCCR release.

This PR was auto-generated by security-tsccr/actions/runs/10878389576

You can alter the configuration of this automation via the hcl config in security-tsccr/automation

This PR can be regenerated by dispatching the GitHub workflow Pin Action Refs. Please reach out to #team-prodsec if you have any questions.

xiehan commented 2 months ago

I'm not familiar enough with this build process to know whether we do or don't rely on file names that start with ., so be very wary of this breaking change in upload-artifact v4.4.0 which has broken lots of projects' CI jobs.

github-actions[bot] commented 4 weeks ago

I'm going to lock this pull request because it has been closed for 30 days. This helps our maintainers find and focus on the active issues. If you've found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.