theupdateframework / tuf-on-ci-template

2 stars 1 forks source link

Add version comment to all action hashes #5

Closed jku closed 8 months ago

jku commented 10 months ago

Reviewing dependabot PRs for GitHuib Actions would be easier if the version number was included: we should add the version as a comment.

So for all actions in all workflows in .github/workflows/ instead of

uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f

use:

uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4

Dependabot will update the comment during updates