Skip to content

ci: pin GitHub Actions to SHA hashes#62

Merged
erishforG merged 3 commits intodevelopfrom
feature/58
Apr 15, 2026
Merged

ci: pin GitHub Actions to SHA hashes#62
erishforG merged 3 commits intodevelopfrom
feature/58

Conversation

@erishforG
Copy link
Copy Markdown
Owner

Summary

  • 모든 GitHub Actions 참조를 태그 → SHA 해시로 고정
  • actions/checkout, dtolnay/rust-toolchain, Swatinem/rust-cache 대상
  • 태그 변조를 통한 supply chain 공격 방지

Related Issue

Closes #58

Type of Change

  • CI/CD

Pre-submit Checklist

  • N/A (CI config only)

🤖 Generated with Claude Code

@erishforG erishforG changed the base branch from main to develop April 15, 2026 15:35
@erishforG erishforG closed this Apr 15, 2026
@erishforG erishforG reopened this Apr 15, 2026
Replace mutable tag references with full SHA hashes to prevent
supply chain attacks via tag manipulation.

- actions/checkout@v4 → @34e114876b...
- dtolnay/rust-toolchain@stable → @29eef336d9...
- Swatinem/rust-cache@v2 → @e18b497796...

Closes #58

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@erishforG erishforG merged commit fdea423 into develop Apr 15, 2026
7 checks passed
@erishforG erishforG deleted the feature/58 branch April 15, 2026 15:51
@erishforG erishforG mentioned this pull request Apr 16, 2026
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

GitHub Actions 액션 SHA 고정

1 participant