Skip to content

Pin GitHub Actions to commit SHAs - #13

Merged
nachorpaez merged 1 commit into
masterfrom
SEC-4382/sha-pin-actions-uZBcmHokBCuN
Nov 11, 2026
Merged

nachorpaez merged 1 commit into
masterfrom
SEC-4382/sha-pin-actions-uZBcmHokBCuN

Conversation

@nachorpaez

Copy link
Copy Markdown
Contributor

Pins every GitHub Action referenced by a tag or branch in this repository's workflows to the full commit SHA that ref currently resolves to, so behavior is unchanged. The resolved version is kept as a trailing comment for readability and for Dependabot/Renovate updates.

This follows GitHub's recommendation to pin versions of actions to a full-length commit SHA.

File Action Previous ref Pinned SHA (version)
.github/workflows/pr-auditor.yml actions/checkout v4 11d5960a326750d5838078e36cf38b85af677262 (v4.4.0)
.github/workflows/pr-auditor.yml actions/setup-go v4 7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 (v4.3.0)
.github/workflows/pr-auditor.yml sourcegraph/sourcegraph/.github/workflows/report-job-failure.yml main e144b26f9ea91494a4712311eec78b92d0796864 (main)

Created by a Sourcegraph agentic batch change.

@nachorpaez
nachorpaez requested a review from a team November 11, 2026 10:59
@nachorpaez
nachorpaez merged commit 3e56e2d into master Nov 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant