SEC-090: Automated trusted workflow pinning (2024-06-17)

hashicorp / terraform-provider-scaffolding-framework

Quick start repository for creating a Terraform provider using terraform-plugin-framework

Mozilla Public License 2.0

304 stars 149 forks source link

Closed hashicorp-tsccr[bot] closed 4 months ago

hashicorp-tsccr[bot] commented 4 months ago

Bumping GitHub Actions version to latest TSCCR release.

changes in .github/workflows/release.yml
- bump goreleaser/goreleaser-action from v5.1.0 to v6.0.0 (release notes)

You can alter the configuration of this automation via the hcl config in security-tsccr/automation

This PR can be regenerated by dispatching the GitHub workflow Pin Action Refs. Please reach out to #team-prodsec if you have any questions.

bflad commented 4 months ago

Covered by #228