sethvargo / ratchet

A tool for securing CI/CD workflows with version pinning.
Apache License 2.0
769 stars 32 forks source link

Fix upgrade bug for GitHub Actions container refs #85

Closed sethvargo closed 2 months ago

sethvargo commented 2 months ago

There was a bug with "upgrade" wherein GitHub Actions container refs were losing their "docker://" prefix. This also introduces a new "-pin" flag to the "upgrade" command, which can be used to skip pinning upgraded refs.