chore: change github actions from tags to SHAs - Githubissues

procore-oss / blueprinter-activerecord

MIT License

9 stars 3 forks source link

chore: change github actions from tags to SHAs #18

Closed jmeridth closed 3 months ago

jmeridth commented 3 months ago

It is more secure. SHAs can't change out from underneath you, tags can

[x] change GitHub Actions to use SHAs instead of tags
- Why?
- To prevent supply chain attack. Tags can move. They are mutable. SHAs are not.
- used frizbee - ran frizbee ghactions -d .github/workflows locally - also fixes formatting

Checklist:

[x] I have updated the necessary documentation
[x] I have signed off all my commits as required by DCO
[x] My build is green

jmeridth commented 3 months ago

@jhollinger thank you for the approval. Can you please merge? I'm unable. 😄