Skip to content

security(ci): pin GitHub Actions to full commit SHAs - #5376

Open
whoisxx wants to merge 1 commit into
release-v1.44from
chore/pin-actions-sha
Open

whoisxx wants to merge 1 commit into
release-v1.44from
chore/pin-actions-sha

Conversation

@whoisxx

@whoisxx whoisxx commented Oct 30, 2026

Copy link
Copy Markdown

Pin every third-party GitHub Action in this repo's workflows to a full-length commit SHA instead of a mutable tag or branch.

reference: Palo Alto Networks Unit42: tj-actions/changed-files incident

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants