sneak/upaas
1
0
Fork 0
Code Issues 14 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

fix: pin all external refs to cryptographic identity (closes #118) #119

Merged
sneak merged 1 commits from fix/pin-external-refs-crypto-identity into main 2026-02-23 20:48:09 +01:00
Conversation 3 Commits 1 Files Changed 1 +4 -4

1 Commits

Author SHA1 Message Date
user
0ed2d02dfe fix: pin all external refs to cryptographic identity (closes #118)
All checks were successful
Check / check (pull_request) Successful in 11m41s
Details 
- Pin Docker base images to sha256 digests (golang, alpine)
- Pin go install commands to commit SHAs (not version tags)
  - golangci-lint: 5d1e709b7be35cb2025444e19de266b056b7b7ee (v2.10.1)
  - goimports: 009367f5c17a8d4c45a961a3a509277190a9a6f0 (v0.42.0)
- CI workflow was already correctly pinned to commit SHAs

All references now use cryptographic identity, eliminating RCE risk
from mutable tags.
 2026-02-21 00:50:44 -08:00