Skip to content

VLN-1538: remediate checkout-below-v7 - #300

Merged
yuandrew merged 1 commit into
mainfrom
camper/checkout-below-v7-4786b8d8
Jul 23, 2026
Merged

VLN-1538: remediate checkout-below-v7#300
yuandrew merged 1 commit into
mainfrom
camper/checkout-below-v7-4786b8d8

Conversation

@picatz

@picatz picatz commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

🏕️ This pull request was created by camper, an automated security campaign tool.

Finding

Rulecheckout-below-v7
SeverityMEDIUM
Repositorytemporalio/api-go
TicketVLN-1538

Summary

  • .github/workflows/check-sdk-compat.yml: Pinned actions/checkout to 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0.
  • .github/workflows/ci.yml: Pinned actions/checkout to 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0.
  • .github/workflows/create-release.yml: Pinned actions/checkout to 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0.
  • .github/workflows/update-proto.yml: Pinned actions/checkout to 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0.

Instructions

  • Approve to merge this fix
  • Request changes to trigger a new remediation attempt
  • /camper rebase — rebase onto the base branch
  • /camper close — close this PR without merging
  • /camper retry — regenerate the fix from scratch against the current base

@picatz
picatz requested review from a team as code owners July 23, 2026 15:57
@yuandrew
yuandrew merged commit cca720f into main Jul 23, 2026
4 checks passed
@yuandrew
yuandrew deleted the camper/checkout-below-v7-4786b8d8 branch July 23, 2026 16:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants