Skip to content

chore(deps): update actions/create-github-app-token digest to 1b10c78#137

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/actions-create-github-app-token-digest
Open

chore(deps): update actions/create-github-app-token digest to 1b10c78#137
renovate[bot] wants to merge 1 commit intomainfrom
renovate/actions-create-github-app-token-digest

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Apr 13, 2026

This PR contains the following updates:

Package Type Update Change
actions/create-github-app-token (changelog) action digest f8d387b1b10c78

Configuration

📅 Schedule: (in timezone Asia/Ho_Chi_Minh)

  • Branch creation
    • "before 5am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from n24q02m as a code owner April 13, 2026 17:13
@renovate renovate bot added the dependencies Pull requests that update a dependency file label Apr 13, 2026
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 13, 2026

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/actions/create-github-app-token 1b10c78c7865c340bc4f6099eb2f838309f1e8c3 🟢 6.1
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 0Found 0/8 approved changesets -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
SAST🟢 6SAST tool is not run on all commits -- score normalized to 6

Scanned Files

  • .github/workflows/cd.yml

@n24q02m n24q02m force-pushed the main branch 2 times, most recently from 1213e1a to 8d81f02 Compare April 16, 2026 07:35
@renovate renovate bot force-pushed the renovate/actions-create-github-app-token-digest branch from 6b1f8b4 to 8c695cf Compare April 17, 2026 04:11
@renovate renovate bot force-pushed the renovate/actions-create-github-app-token-digest branch from 8c695cf to e1d2be1 Compare April 17, 2026 05:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants