SEC-090: Automated trusted workflow pinning (2024-07-17)

hashicorp / terraform-provider-external

Utility provider that exists to provide an interface between Terraform and external programs. Useful for integrating Terraform with a system for which a first-class provider does not exist.

Mozilla Public License 2.0

182 stars 50 forks source link

Bumping GitHub Actions version to latest TSCCR release.

changes in .github/workflows/dependabot-auto-merge.yml
- bump dependabot/fetch-metadata from v2.1.0 to v2.2.0 (release notes)
changes in .github/workflows/release.yml
- bump actions/upload-artifact from v4.3.3 to v4.3.4 (release notes)

This PR was auto-generated by security-tsccr/actions/runs/9934502871

You can alter the configuration of this automation via the hcl config in security-tsccr/automation

This PR can be regenerated by dispatching the GitHub workflow Pin Action Refs. Please reach out to #team-prodsec if you have any questions.

hashicorp / terraform-provider-external

SEC-090: Automated trusted workflow pinning (2024-07-17) #349