t.behrendt/sec-actions
0
0
Fork 0
Code Issues 2 Pull Requests Actions Activity

ci: pin various actions to a proper semver version #38

Merged
t.behrendt merged 1 commits from chore-pin-varios-actions-to-a-proper-semver-version into main 2026-02-14 19:32:41 +01:00
Conversation 2 Commits 1 Files Changed 3
+12 -12
t.behrendt commented 2026-02-14 19:00:51 +01:00
Owner
Copy Link
Copy Source

Pinning to the full semver where it is missing. Some digests updated as well.
Also fixed some formatting, there were extra spaces.

Pinning to the full semver where it is missing. Some digests updated as well. Also fixed some formatting, there were extra spaces.
t.behrendt added 1 commit 2026-02-14 19:00:51 +01:00
ci: pin varios actions to a proper semver version
CI / Test Setup Trivy amd64 (pull_request) Successful in 9s
Details
CI / Test Get Images From Files (pull_request) Successful in 7s
Details
CI / Test Setup Trivy arm64 (pull_request) Successful in 32s
Details
CI / Test Setup DB (pull_request) Successful in 1m55s
Details
e31535d139
t.behrendt requested review from branch-buddy 2026-02-14 19:05:29 +01:00
branch-buddy approved these changes 2026-02-14 19:09:42 +01:00
branch-buddy left a comment
Collaborator
Copy Link
Copy Source

The PR title mentions pinning actions to a proper semver version, but the diff shows commit hashes (not semantic versions) remain unchanged. The version comments are updated but the actual version specifiers are still commit hashes, which doesn't fully align with the PR's goal.

The PR title mentions pinning actions to a proper semver version, but the diff shows commit hashes (not semantic versions) remain unchanged. The version comments are updated but the actual version specifiers are still commit hashes, which doesn't fully align with the PR's goal.
branch-buddy commented 2026-02-14 19:09:42 +01:00
Collaborator
Copy Link
Copy Source

Update the commit hash to use semantic version (e.g., actions/checkout@v6.0.2) instead of the current hash

Update the commit hash to use semantic version (e.g., actions/checkout@v6.0.2) instead of the current hash
branch-buddy commented 2026-02-14 19:09:42 +01:00
Collaborator
Copy Link
Copy Source

Ensure all workflow files use semantic versions, not commit hashes

Ensure all workflow files use semantic versions, not commit hashes
branch-buddy commented 2026-02-14 19:09:42 +01:00
Collaborator
Copy Link
Copy Source

Verify the commit hash corresponds to the semantic version being referenced

Verify the commit hash corresponds to the semantic version being referenced
t.behrendt changed title from ci: pin varios actions to a proper semver version to ci: pin various actions to a proper semver version 2026-02-14 19:12:54 +01:00
t.behrendt removed review request for branch-buddy 2026-02-14 19:22:28 +01:00
branch-buddy approved these changes 2026-02-14 19:24:45 +01:00
branch-buddy left a comment
Collaborator
Copy Link
Copy Source

The changes align with the PR title and description. The diff updates action versions to proper SEMVER (e.g., v6.0.2) and fixes formatting issues like spacing around commas. No critical issues found.

The changes align with the PR title and description. The diff updates action versions to proper SEMVER (e.g., v6.0.2) and fixes formatting issues like spacing around commas. No critical issues found.
branch-buddy commented 2026-02-14 19:09:42 +01:00
Collaborator
Copy Link
Copy Source

Update the commit hash to use semantic version (e.g., actions/checkout@v6.0.2) instead of the current hash

Update the commit hash to use semantic version (e.g., actions/checkout@v6.0.2) instead of the current hash
branch-buddy commented 2026-02-14 19:09:42 +01:00
Collaborator
Copy Link
Copy Source

Ensure all workflow files use semantic versions, not commit hashes

Ensure all workflow files use semantic versions, not commit hashes
branch-buddy commented 2026-02-14 19:09:42 +01:00
Collaborator
Copy Link
Copy Source

Verify the commit hash corresponds to the semantic version being referenced

Verify the commit hash corresponds to the semantic version being referenced
t.behrendt merged commit 067d321f7a into main 2026-02-14 19:32:41 +01:00
t.behrendt deleted branch chore-pin-varios-actions-to-a-proper-semver-version 2026-02-14 19:32:41 +01:00
Sign in to join this conversation.
Reviewers
No Reviewers
branch-buddy
Labels
Clear labels
action
automerge
bug
Something is not working
 deps
docker
duplicate
This issue or pull request already exists
 enhancement
New feature
 go
help wanted
Need some help
 invalid
Something is wrong
 k8s
npm
question
More information is needed
 security
wontfix
This won't be fixed
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
branch-buddy renovate-bot t.behrendt
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: t.behrendt/sec-actions#38
Delete Branch "chore-pin-varios-actions-to-a-proper-semver-version"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?