Skip to content

Refact DIB Report

Refact DIB Report #136

Workflow file for this run

---
name: Actions security
on: # yamllint disable-line rule:truthy
pull_request:
types: [opened, synchronize]
paths: [.github/workflows/**]
jobs:
# Actions security tries to keep your GitHub actions secure by following these simple rules:
# - Check if no issues are found on your GitHub Actions
# - Ensure that all GitHub Actions and reusable workflow are pinned using directly a commit SHA
actions_security:
runs-on: ubuntu-latest
permissions:
security-events: write
steps:
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
- name: Github Actions lint
run: |
curl -O https://raw.githubusercontent.com/rhysd/actionlint/main/.github/actionlint-matcher.json
echo "::add-matcher::.github/actionlint-matcher.json"
bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
./actionlint -color
- name: Ensure SHA pinned actions
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@2f2ebc6d914ab515939dc13f570f91baeb2c194c # v3.0.6