mirror of
https://github.com/ceph/ceph-csi.git
synced 2025-06-14 18:53:35 +00:00
ci: Harden GitHub Actions
Update GitHub actions to use full length commit ids for third-party actions to reduce security risk in case of vulnerabilities. Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> Co-authored-by: Nikhil-Ladha <nikhilladha1999@gmail.com>
This commit is contained in:
committed by
mergify[bot]
parent
25d4186265
commit
56d08e1b4d
6
.github/workflows/snyk.yaml
vendored
6
.github/workflows/snyk.yaml
vendored
@ -20,11 +20,13 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: checkout
|
||||
uses: actions/checkout@v4
|
||||
# yamllint disable-line rule:line-length
|
||||
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
|
||||
with:
|
||||
fetch-depth: 0
|
||||
|
||||
- name: run Snyk to check for code vulnerabilities
|
||||
uses: snyk/actions/golang@master
|
||||
# yamllint disable-line rule:line-length
|
||||
uses: snyk/actions/golang@cdb760004ba9ea4d525f2e043745dfe85bb9077e # master
|
||||
env:
|
||||
SNYK_TOKEN: ${{ secrets.SYNK_TOKEN }}
|
||||
|
Reference in New Issue
Block a user