chore: change github actions from tags to SHAs - Githubissues

procore-oss / handcuffs

A Ruby gem for running Active Record migrations in phases

MIT License

92 stars 6 forks source link

chore: change github actions from tags to SHAs #86

Closed jmeridth closed 5 months ago

jmeridth commented 5 months ago

[x] change GitHub Actions to use SHAs instead of tags
- Why? - To prevent supply chain attack. Tags can move. They are mutable. SHAs are not.
- used frizbee - ran frizbee ghactions -d .github/workflows locally - also fixes formatting

Checklist:

[x] I have updated the necessary documentation
[x] I have signed off all my commits as required by DCO
[x] My build is green