scientific-python / circleci-artifacts-redirector-action

GitHub Action to add a GitHub status link to a CircleCI artifact.
MIT License
14 stars 10 forks source link

Use hash in README instructions #54

Closed pllim closed 3 months ago

pllim commented 3 months ago

Good security practice? 🤷‍♀️

larsoner commented 3 months ago

Maybe it would be better to add a comment suggesting to prefer hashes? Otherwise we'll have to keep updating this with each release, which is too easy to forget

pllim commented 3 months ago

OK, done. Thanks for review!

larsoner commented 3 months ago

Thanks @pllim !