Skip to content

chore(otterdog): pinning workflows due to blueprint pin-github-actions - #8

Open
eclipse-otterdog[bot] wants to merge 1 commit into
mainfrom
otterdog/blueprint/pin-github-actions
Open

eclipse-otterdog[bot] wants to merge 1 commit into
mainfrom
otterdog/blueprint/pin-github-actions

Conversation

@eclipse-otterdog

Copy link
Copy Markdown
Contributor

This PR has been automatically created by Otterdog due to blueprint: Pin GitHub Actions to commit SHAs.

Supply-chain hardening: every used action / reusable workflow gets pinned to a full commit SHA (with a version comment). Opt-out per line via "# ignore: pin". Note: the "uses: osgi/.github/..." references from the require-ci-workflows blueprint stay on @main deliberately — pinning them would defeat the central-update mechanism; mark them with "# ignore: pin" if this blueprint proposes pinning there.

Note

Closing this PR without merging will dismiss this blueprint for this repository.
To re-enable the blueprint, re-open the PR.

Tip

The status of the blueprint can also be accessed via the Dashboard.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants