Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci(actions): immutable github sha instead of github head_ref #10558

Merged
merged 3 commits into from
Jan 9, 2025

Conversation

misba7
Copy link
Contributor

@misba7 misba7 commented Jan 7, 2025

Using the immutable github.sha as an identifier instead of untrusted input github.head_ref
We can slice the commit sha for better readibility, however this could make identifying the commit harder.

closes #10557

@misba7 misba7 requested a review from moabu as a code owner January 7, 2025 08:36
@moabu moabu changed the title fix(actions): immutable github sha instead of github head_ref ci(actions): immutable github sha instead of github head_ref Jan 7, 2025
@moabu moabu merged commit 5091b56 into main Jan 9, 2025
3 checks passed
@moabu moabu deleted the fix-gh-actions-dangerous branch January 9, 2025 14:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

ci(workflow): script injection with untrusted input ' github.head_ref '
2 participants