Skip to content

Pin GitHub Actions to commit SHAs#1

Open
moneylion-akshenbot[bot] wants to merge 1 commit into
masterfrom
akshenbot/pin-actions-20260302-095807
Open

Pin GitHub Actions to commit SHAs#1
moneylion-akshenbot[bot] wants to merge 1 commit into
masterfrom
akshenbot/pin-actions-20260302-095807

Conversation

@moneylion-akshenbot
Copy link
Copy Markdown

@moneylion-akshenbot moneylion-akshenbot Bot commented Mar 2, 2026

Automated Action Pinning

This PR automatically pins GitHub Actions to specific commit SHAs for improved security and reproducibility.

Summary

  • Total actions pinned: 18
  • Workflows updated: 3

Changes

.github/workflows/cron.yaml

  • actions/checkout@v1actions/checkout@8e8c483 (line 12)
  • aws-actions/configure-aws-credentials@v1aws-actions/configure-aws-credentials@ec61189 (line 16)

.github/workflows/review.yaml

  • actions/checkout@v1actions/checkout@8e8c483 (line 16)
  • actions/setup-python@v1actions/setup-python@a309ff8 (line 20)
  • actions/checkout@v1actions/checkout@8e8c483 (line 52)
  • actions/setup-python@v1actions/setup-python@a309ff8 (line 56)
  • aws-actions/configure-aws-credentials@v1aws-actions/configure-aws-credentials@ec61189 (line 60)
  • actions/checkout@v1actions/checkout@8e8c483 (line 31)
  • actions/setup-python@v1actions/setup-python@a309ff8 (line 35)
  • aws-actions/configure-aws-credentials@v1aws-actions/configure-aws-credentials@ec61189 (line 39)

.github/workflows/push.yaml

  • actions/checkout@v1actions/checkout@8e8c483 (line 31)
  • actions/setup-python@v1actions/setup-python@a309ff8 (line 35)
  • aws-actions/configure-aws-credentials@v1aws-actions/configure-aws-credentials@ec61189 (line 39)
  • actions/checkout@v1actions/checkout@8e8c483 (line 15)
  • actions/setup-python@v1actions/setup-python@a309ff8 (line 19)
  • actions/checkout@v1actions/checkout@8e8c483 (line 53)
  • actions/setup-python@v1actions/setup-python@a309ff8 (line 57)
  • aws-actions/configure-aws-credentials@v1aws-actions/configure-aws-credentials@ec61189 (line 61)

Generated by AkshenBot

Automatically pinned 18 action(s) across 3 workflow(s) for improved security.
@moneylion-akshenbot moneylion-akshenbot Bot force-pushed the akshenbot/pin-actions-20260302-095807 branch from 347205c to 57de602 Compare April 8, 2026 06:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants