sneak/simplelog
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: pin checkout action by SHA, run on all branches

Browse Source 
- Pin actions/checkout to full SHA (v4.2.2) to prevent mutable tag RCE
- Remove branch filter so CI runs on push to every branch, not just main
This commit is contained in:
clawbot
2026-03-02 12:05:39 -08:00
parent e76b1cbcb5
commit 4ccd3b6bb1
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
.gitea/workflows/check.yml
View File

@@ -2,12 +2,11 @@ name: check
on: on:
push: push:
branches: [main]
pull_request: pull_request:
jobs: jobs:
check: check:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- run: docker build . - run: docker build .