Repository navigation
CI SHA-pinning #7
Description
Activity
- added a commit that references this issue
on Jun 15, 2026 Duplicate of #5
@mrpunyetaz-cloud hi! please provide more details as i'm unable to see in what place it is duplicate
- added a commit that references this issue
on Jul 9, 2026 Agent brief (for handing this issue to a coding agent — tier: basic. One PR,
Closes #7; branch frommain.)Pin every third-party
uses: owner/action@tagacross the five workflows (.github/workflows/ci.yml,mine.yml,mine-on-push.yml,oracle.yml,pr-issue-validation.yml) to the full commit SHA with a trailing# vNversion comment. Leave local./action references untouched.Done when: no mutable tag remains in any
uses:line, the version comments make future bumps reviewable, and CI is green.
Generated by Claude Code
CI SHA-pinning: agreed it's a reasonable call for this PoC (recorded a "learning" to defer it to Dependabot/a hardening pass).