Pin `ghaction-import-gpg` to a SHA

weaveworks / pipeline-controller

This repository contains the Pipeline CRD and associated controller for Weave GitOps Enterprise.

1 stars 4 forks source link

Pin `ghaction-import-gpg` to a SHA #108

Closed yiannistri closed 1 year ago

yiannistri commented 1 year ago

For security (and stability) reasons we should ensure that this GH action is safe to use and pin it to a SHA so that it doesn't change without us noticing.

yiannistri commented 1 year ago

We've replaced this GH action with gpg/git commands so this story is no longer required.