SEC-090: Automated trusted workflow pinning (2024-11-04) - Githubissues

hashicorp / vault-plugin-auth-kubernetes

Vault authentication plugin for Kubernetes Service Accounts

https://www.vaultproject.io/docs/auth/kubernetes.html

Mozilla Public License 2.0

209 stars 61 forks source link

SEC-090: Automated trusted workflow pinning (2024-11-04) #268

Closed hashicorp-tsccr[bot] closed 2 days ago

hashicorp-tsccr[bot] commented 3 days ago

Bumping GitHub Actions version to latest TSCCR release.

changes in .github/workflows/tests.yaml
- bump actions/checkout from v4.2.1 to v4.2.2 (release notes)
- bump actions/setup-go from v5.0.2 to v5.1.0 (release notes)
- bump actions/checkout from v4.2.1 to v4.2.2 (release notes)
- bump actions/setup-go from v5.0.2 to v5.1.0 (release notes)
- bump actions/checkout from v4.2.1 to v4.2.2 (release notes)
- bump actions/setup-go from v5.0.2 to v5.1.0 (release notes)

This PR was auto-generated by security-tsccr/actions/runs/11658930006

You can alter the configuration of this automation via the hcl config in security-tsccr/automation

This PR can be regenerated by dispatching the GitHub workflow Pin Action Refs. Please reach out to #team-prodsec if you have any questions.