Skip to content

ci: pin GitHub Actions to commit SHAs#323

Open
nicklasl wants to merge 2 commits into
mainfrom
nicklasl/chore/pin-actions-to-sha
Open

ci: pin GitHub Actions to commit SHAs#323
nicklasl wants to merge 2 commits into
mainfrom
nicklasl/chore/pin-actions-to-sha

Conversation

@nicklasl
Copy link
Copy Markdown
Member

Summary

  • Pin all GitHub Actions to immutable commit SHAs to mitigate supply chain attacks (e.g. TanStack "Mini Shai-Hulud")

Test plan

  • CI passes with SHA-pinned actions

🤖 Generated with Claude Code

nicklasl and others added 2 commits May 19, 2026 10:49
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Mitigate supply chain attacks by pinning all third-party actions to immutable commit SHAs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@nicklasl nicklasl changed the title fix(ci): pin GitHub Actions to commit SHAs ci: pin GitHub Actions to commit SHAs May 20, 2026
@nicklasl nicklasl marked this pull request as ready for review May 20, 2026 11:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant