SEC-090: Automated trusted workflow pinning (2023-04-03)

hashicorp-tsccr[bot] commented 1 year ago

Hello, This PR was auto-generated to pin the Actions workflow files in this repository to use trusted SHAs. This is in support of RFC SEC-090 which is due to be implemented by EOQ2 FY24.

Please do the following:

Approve and merge this PR if you are happy with the changes.
Check if there are any untrusted third-party Actions in the workflow files and onboard them to the TSCCR.
The yaml comment "# TSCCR: no entry for repository " in the workflow files identifies an untrusted Action.
If you have to onboard any third-party Actions, update and pin your workflows using the tsccr-helper tool after the Actions have been onboarded OR reach out to #team-prodsec and we can run this automation again.
Verify that your Actions are still working as expected after pinning.

Please reach out to #team-prodsec if you have any questions.

vercel[bot] commented 1 year ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
terraform-docs-agents	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Apr 3, 2023 3:54pm

hashicorp-cla commented 1 year ago

All committers have signed the CLA.

hashicorp / terraform-docs-agents

SEC-090: Automated trusted workflow pinning (2023-04-03) #54