Skip to content

Pin github actions to SHA - #1281

Merged
yubiuser merged 2 commits into
masterfrom
pin_sha
Nov 9, 2025
Merged

yubiuser merged 2 commits into
masterfrom
pin_sha

Conversation

@yubiuser

Copy link
Copy Markdown
Member

What does this PR aim to accomplish?:

Pins the actions used in our workflow by commit. This is the recommended way to prevent supply chain attacks

https://github.blog/changelog/2025-08-15-github-actions-policy-now-supports-blocking-and-sha-pinning-actions/

The human-friendly comment tag should be auto-updated by dependabot as well

https://github.blog/changelog/2022-10-31-dependabot-now-updates-comments-in-github-actions-workflows-referencing-action-versions/


By submitting this pull request, I confirm the following:

  1. I have read and understood the contributors guide, as well as this entire template. I understand which branch to base my commits and Pull Requests against.
  2. I have commented my proposed changes within the code and I have tested my changes.
  3. I am willing to help maintain this change if there are issues with it later.
  4. It is compatible with the EUPL 1.2 license
  5. I have squashed any insignificant commits. (git rebase)
  6. I have checked that another pull request for this purpose does not exist.
  7. I have considered, and confirmed that this submission will be valuable to others.
  8. I accept that this submission may not be used, and the pull request closed at the will of the maintainer.
  9. I give this submission freely, and claim no ownership to its content.

  • I have read the above and my PR is ready for review. Check this box to confirm

@yubiuser
yubiuser requested a review from a team as a code owner August 28, 2025 15:11
@netlify

netlify Bot commented Aug 28, 2025 •

Copy link
Copy Markdown

✅ Deploy Preview for pihole-docs ready!

Name Link
🔨 Latest commit 12ea0f0
🔍 Latest deploy log https://app.netlify.com/projects/pihole-docs/deploys/68fe74d8c7e78f000898aecb
😎 Deploy Preview https://deploy-preview-1281--pihole-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@github-actions

Copy link
Copy Markdown
Contributor

This pull request has conflicts, please resolve those before we can evaluate the pull request.

@github-actions

Copy link
Copy Markdown
Contributor

Conflicts have been resolved.

@github-actions

Copy link
Copy Markdown
Contributor

This pull request has conflicts, please resolve those before we can evaluate the pull request.

@github-actions

Copy link
Copy Markdown
Contributor

Conflicts have been resolved.

Signed-off-by: yubiuser <github@yubiuser.dev>
Signed-off-by: yubiuser <github@yubiuser.dev>
@yubiuser
yubiuser merged commit a17d794 into master Nov 9, 2025
11 checks passed
@yubiuser
yubiuser deleted the pin_sha branch November 9, 2025 11:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants