Skip to content

Pin GitHub actions and associated tooling to git hashes#45

Merged
AlCutter merged 3 commits intotransparency-dev:mainfrom
AlCutter:pin_actions
Jan 5, 2023
Merged

Pin GitHub actions and associated tooling to git hashes#45
AlCutter merged 3 commits intotransparency-dev:mainfrom
AlCutter:pin_actions

Conversation

@AlCutter
Copy link
Copy Markdown
Collaborator

@AlCutter AlCutter commented Nov 28, 2022

Pins our GitHub Action configs and the clusterfuzzlite tooling to explicit git hashes.

This reduces the potential for compromised dependencies to undermine our own repo security.

@AlCutter AlCutter requested a review from smeiklej November 28, 2022 14:44
@AlCutter AlCutter requested a review from a team as a code owner November 28, 2022 14:44
@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Nov 28, 2022

Codecov Report

Base: 89.33% // Head: 89.33% // No change to project coverage 👍

Coverage data is based on head (69abf68) compared to base (4a0f207).
Patch has no changes to coverable lines.

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #45   +/-   ##
=======================================
  Coverage   89.33%   89.33%           
=======================================
  Files           7        7           
  Lines         497      497           
=======================================
  Hits          444      444           
  Misses         48       48           
  Partials        5        5           

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.

@smeiklej
Copy link
Copy Markdown

Can you remind me how to rerun the fuzzing check?

@AlCutter
Copy link
Copy Markdown
Collaborator Author

Can you remind me how to rerun the fuzzing check?

There's a "re-run" button on the action details page, but the issue seems to be upstream in the fuzzer action/library itself :/

@AlCutter AlCutter changed the title Pin GitHub actions to git hashes Pin GitHub actions and associated tooling to git hashes Jan 5, 2023
@AlCutter AlCutter merged commit 4bf6e4b into transparency-dev:main Jan 5, 2023
@AlCutter AlCutter deleted the pin_actions branch January 5, 2023 13:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants