Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
Apache License 2.0
19.21k
stars
716
forks
source link
Pin Actions workflow versions for deterministic execution. Configure Dependabot to keep workflows up to date. #464
Signed-off-by: Chris Thach 12981621+cthach@users.noreply.github.com
What
Why
By pinning to a specific workflow version, we prevent workflow breakage or unexpected behavior when workflow owners publish updates.
Dependabot can be configured to handle the chore of updating workflow versions when new ones are published.
How Tested
Searching for when a reusable workflow is used and manually verifying the tag in the upstream repository.