storytold/craft-launcher
2
0
Fork 0
mirror of https://github.com/storytold/craft-launcher.git synced 2026-11-02 18:07:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637)

Browse Source 
Pin third-party actions to full-length commit SHAs (with version comments)
instead of mutable tags/branches to prevent supply-chain tampering via
retagged releases. Resolves SonarCloud rule githubactions:S7637.
This commit is contained in:
Dylan M. Taylor
2026-10-21 17:04:15 -04:00
parent fe2534d51b
commit 8abe6e0c03
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/ci.yml
+2 -2
View File
@@ -38,7 +38,7 @@ jobs:
sudo apt-get install -y --no-install-recommends \
libxkbcommon-dev libwayland-dev libx11-dev libxrandr-dev libxi-dev libgl1-mesa-dev
- uses: dtolnay/rust-toolchain@stable
- uses: dtolnay/rust-toolchain@b725eda525362e7cf34af9a7243cac1e3f01a7ec # stable
with:
components: clippy, rustfmt
@@ -61,7 +61,7 @@ jobs:
TRUNK_VERSION: 0.21.14
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- uses: dtolnay/rust-toolchain@stable
- uses: dtolnay/rust-toolchain@b725eda525362e7cf34af9a7243cac1e3f01a7ec # stable
with:
targets: wasm32-unknown-unknown
components: clippy