Use full Action SHAs rather than versioned releases

panther-labs / pySigma-backend-panther

pySigma Panther Backend

https://panther.com/

Apache License 2.0

4 stars 0 forks source link

Use full Action SHAs rather than versioned releases #46

Closed egibs closed 5 months ago

egibs commented 5 months ago

Background

Relates to: EPD-370

Pinning Action versions to the full SHA rather than the version is a best practice from a supply chain security perspective. Dependabot will handle any updates for us.

Changes

Moves all Actions to their latest respective commit SHA

Testing

Checks still pass as expected