toptal / chewy

High-level Elasticsearch Ruby framework based on the official elasticsearch-ruby client
MIT License
1.89k stars 368 forks source link

fix: change gha version to SHA #813

Closed Jakub-Kwak closed 3 years ago

Jakub-Kwak commented 3 years ago

CI-601 Using master as as version of 3rd party GitHub action is a potential security risk. We are changing from: uses: elastic/elastic-github-actions/elasticsearch@master to: uses: elastic/elastic-github-actions/elasticsearch@<SHA-key> What I did is just went to the repository, and got the latest SHA of the master. 3rd party GHA repositories changed within this PR:

How to test


Before submitting the PR make sure the following are checked: