LotusGuild/tinker_tickets
4
0
Fork 0
Code Issues 6 Pull Requests Actions Packages Projects Releases Wiki Activity

CI: pin actions/checkout to a commit SHA
Lint / Deploy (push) Successful in 4s
Details
Lint / Notify on failure (push) Has been skipped
Details
Lint / PHP (phpcs PSR-12) (push) Successful in 34s
Details
Lint / JS (eslint) (push) Successful in 9s
Details
Lint / PHP requirements (version + extensions) (push) Successful in 44s
Details
Security / PHP Security (semgrep) (push) Successful in 2m48s
Details

Browse Source 
semgrep's github-actions-mutable-action-tag rule (now running, after the
pip install was fixed) flags actions/checkout@v3 as a mutable tag that
could be repointed upstream (supply-chain risk). Pin all four uses to the
SHA the v3 tag currently resolves to (v3.6.0), preserving behavior.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
jared
2026-06-30 14:53:38 -04:00
co-authored by Claude Opus 4.8
parent 99c840fce0
commit 94ad84dae9
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/lint.yml
+3 -3
View File
@@ -11,7 +11,7 @@ jobs:
name: PHP (phpcs PSR-12) name: PHP (phpcs PSR-12)
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v3 - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
- name: Install PHP and phpcs - name: Install PHP and phpcs
run: | run: |
@@ -27,7 +27,7 @@ jobs:
name: JS (eslint) name: JS (eslint)
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v3 - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
- name: Install ESLint - name: Install ESLint
run: npm install --save-dev eslint@8 run: npm install --save-dev eslint@8
@@ -39,7 +39,7 @@ jobs:
name: PHP requirements (version + extensions) name: PHP requirements (version + extensions)
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v3 - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
- name: Install PHP with required extensions - name: Install PHP with required extensions
run: | run: |
.gitea/workflows/security.yml
+1 -1
View File
@@ -13,7 +13,7 @@ jobs:
name: PHP Security (semgrep) name: PHP Security (semgrep)
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v3 - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
- name: Install semgrep - name: Install semgrep
run: | run: |