922: Pin SHA1 of GitHub actions to ensure predictable version selection - Githubissues

wikimedia / vegalite-wordpress-plugin

4 stars 2 forks source link

922: Pin SHA1 of GitHub actions to ensure predictable version selection #31

Closed kadamwhite closed 11 months ago

kadamwhite commented 11 months ago

Process for enacting this change:

For each uses: statement within the action configuration in the .github/ folder, if the specified dependency action is a remote repository,

Open that repository in GitHub
Go to the releases page
(Review changelog to determine whether we should expect a seamless upgrade)
Copy the commit of the latest release
Paste the commit in place of the v# string in the relevant YAML file
Add a comment after the commit SHA1 explaining the corresponding version number