Skip to content

Conversation

Copy link

Copilot AI commented Jul 18, 2025

Updated the Renovate configuration to include helpers:pinGitHubActionDigestsToSemver in the extends array. This helper ensures that GitHub Actions are pinned to their digest values while maintaining semantic version references in comments, improving security while keeping the configuration readable.

Changes made:

  • Added "helpers:pinGitHubActionDigestsToSemver" to the extends array in renovate.json
  • No other modifications were made to preserve existing configuration

Before:

"extends": [
  "config:base"
]

After:

"extends": [
  "config:base",
  "helpers:pinGitHubActionDigestsToSemver"
]

This change aligns with security best practices by ensuring GitHub Actions are pinned to specific commit digests while maintaining readability through semantic version comments.

Fixes #28.


💬 Share your feedback on Copilot coding agent for the chance to win a $200 gift card! Click here to start the survey.

Copilot AI changed the title [WIP] Pin versions if using Renovate Pin GitHub Action digests to semantic versions in Renovate config Jul 18, 2025
Copilot AI requested a review from trask July 18, 2025 00:42
Copilot finished work on behalf of trask July 18, 2025 00:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Pin versions if using Renovate

2 participants