search

intel / ittapi

Intel® Instrumentation and Tracing Technology (ITT) and Just-In-Time (JIT) API
85 stars 43 forks source link

[StepSecurity] ci: Harden GitHub Actions #109

Closed step-security-bot closed 10 months ago

step-security-bot commented 10 months ago

Summary

This pull request is created by StepSecurity at the request of @rahulchaphalkar. Please merge the Pull Request to incorporate the requested changes. Please tag @rahulchaphalkar on your message if you have any questions related to the PR.

Security Fixes

Pinned Dependencies

GitHub Action tags and Docker tags are mutatble. This poses a security risk. GitHub's Security Hardening guide recommends pinning actions to full length commit.

Feedback

For bug reports, feature requests, and general feedback; please email support@stepsecurity.io. To create such PRs, please visit https://app.stepsecurity.io/securerepo.

Signed-off-by: StepSecurity Bot bot@stepsecurity.io

rahulchaphalkar commented 10 months ago

Pins codeql actions to specific commit, similar to what previous PR https://github.com/intel/ittapi/pull/107https://github.com/intel/ittapi/pull/107 did for other actions.