Skip to content

Pin GitHub Actions to commit hashes and enforce pinning#890

Merged
sylwiaszunejko merged 1 commit into
scylladb:masterfrom
sylwiaszunejko:pin-github-actions
May 22, 2026
Merged

Pin GitHub Actions to commit hashes and enforce pinning#890
sylwiaszunejko merged 1 commit into
scylladb:masterfrom
sylwiaszunejko:pin-github-actions

Conversation

@sylwiaszunejko
Copy link
Copy Markdown
Collaborator

  • Update all action references to use full SHA commit hashes
  • Configure Renovate to pin digests and require 90-day minimum age
  • Add github-actions ecosystem to Dependabot

Fixes: https://scylladb.atlassian.net/browse/DRIVER-580

Pre-review checklist

  • I have split my patch into logically separate commits.
  • All commit messages clearly explain what they change and why.
  • I added relevant tests for new features and bug fixes.
  • All commits compile, pass static checks and pass test.
  • PR description sums up the changes and reasons why they should be introduced.
  • I have provided docstrings for the public items that I want to introduce.
  • I have adjusted the documentation in ./docs/source/.
  • I added appropriate Fixes: annotations to PR description.

Comment thread .github/workflows/docs-pages.yml
Comment thread .github/dependabot.yml Outdated
- Update all action references to use full SHA commit hashes
- Configure Renovate to pin digests and require 90-day minimum age
- Add github-actions ecosystem to Dependabot
@sylwiaszunejko sylwiaszunejko merged commit 44bc95a into scylladb:master May 22, 2026
21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants