Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Reference actions by commit SHA #408

Closed
wants to merge 3 commits into from
Closed

Reference actions by commit SHA #408

wants to merge 3 commits into from

Commits on Sep 15, 2023

  1. Ref actions by commit SHA in CIFuzz.yml 

    It's important to make sure the SHA's are from the original repositories and not forks.

For reference:

https://github.com/actions/upload-artifact/releases/tag/v3.1.2
actions/upload-artifact@0b7f8ab

Also, we're not updating oss-fuzz since the project architecture does not support releases.

Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com>
    @gabibguti
    gabibguti committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    db0f7c5 View commit details
    Browse the repository at this point in the history

  2. Ref actions by commit SHA in build.yml 

    It's important to make sure the SHA's are from the original repositories and not forks.

For reference:

https://github.com/actions/checkout/releases/tag/v3.5.3
actions/checkout@c85c95e

https://github.com/actions/setup-python/releases/tag/v4.7.0
actions/setup-python@61a6322

https://github.com/lukka/run-vcpkg/releases/tag/v7.5
lukka/run-vcpkg@55dacfc

https://github.com/actions/upload-artifact/releases/tag/v3.1.2
actions/upload-artifact@0b7f8ab

Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com>
    @gabibguti
    gabibguti committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    38d85b4 View commit details
    Browse the repository at this point in the history

  3. Ref actions by commit SHA in codeql-analysis.yml 

    It's important to make sure the SHA's are from the original repositories and not forks.

For reference:

https://github.com/actions/checkout/releases/tag/v3.5.3
actions/checkout@c85c95e

https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.14.2
github/codeql-action@f9a7c67

Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com>
    @gabibguti
    gabibguti committed Sep 15, 2023
    Configuration menu
    Copy the full SHA
    143d8fd View commit details
    Browse the repository at this point in the history