Skip to content

ci: pin GitHub Actions to commit SHAs - #25

Merged
s-sajid-ali merged 1 commit into
mainfrom
ci/sha-pin-actions
Oct 15, 2026
Merged

s-sajid-ali merged 1 commit into
mainfrom
ci/sha-pin-actions

Conversation

@s-sajid-ali

Copy link
Copy Markdown
Member

Pins every third-party and GitHub-owned action in .github/workflows/ to a full commit SHA (with a version comment), following the NYU-RTS org action policy (sha_pinning_required: true).

Action Version
actions/checkout v7.0.1
actions/cache v6.1.0
actions/configure-pages v6.0.0
actions/upload-pages-artifact v5.0.0
actions/deploy-pages v5.0.1
oven-sh/setup-bun v2.2.0
docker/setup-qemu-action v4.4.0
docker/setup-buildx-action v4.4.1
docker/login-action v4.6.0
docker/metadata-action v6.2.0
docker/build-push-action v7.4.0

No behavior changes intended; all pins are within the same major version previously referenced.

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@s-sajid-ali
s-sajid-ali merged commit 7d2278b into main Oct 15, 2026
2 checks passed
@s-sajid-ali
s-sajid-ali deleted the ci/sha-pin-actions branch October 15, 2026 14:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant