SEC-090: Automated trusted workflow pinning (2023-11-20)

hashicorp / terraform-plugin-sdk

Terraform Plugin SDK enables building plugins (providers) to manage any service providers or custom in-house solutions

https://developer.hashicorp.com/terraform/plugin

Mozilla Public License 2.0

427 stars 230 forks source link

SEC-090: Automated trusted workflow pinning (2023-11-20) #1281

Closed hashicorp-tsccr[bot] closed 7 months ago

hashicorp-tsccr[bot] commented 8 months ago

Bumping GitHub Actions version to latest TSCCR release.

changes in .github/workflows/ci-changie.yml
- bump miniscruff/changie-action from v2.0.0 to v2 (release notes)

This PR was auto-generated by security-tsccr/actions/runs/6926179262

You can alter the configuration of this automation via the hcl config in security-tsccr/automation

Please reach out to #team-prodsec if you have any questions.

bflad commented 7 months ago

Submitted TSCCR fix for this issue.

github-actions[bot] commented 6 months ago

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active contributions. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.