Security: pin GitHub Actions to SHA hashes · codacy/codacy-analysis-cli@6c2cd0a · GitHub
Skip to content

Commit 6c2cd0a

Browse files
author
Codacy Security Bot
committed
Security: pin GitHub Actions to SHA hashes
Replaces mutable tag/branch references with immutable SHA hashes to prevent supply chain attacks (ref: TeamPCP/Trivy March 2026). Actions left as tags: 0
1 parent bcf871d commit 6c2cd0a

3 files changed

Lines changed: 13 additions & 13 deletions

File tree

‎.github/workflows/comment_issue.yml‎

Lines changed: 5 additions & 5 deletions

‎.github/workflows/create_issue.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
- name: Jira Login
1919
if: env.JIRA_CREATE_ISSUE_AUTO == 'true'
2020
id: login
21-
uses: atlassian/gajira-login@v2.0.0
21+
uses: atlassian/gajira-login@90a599561baaf8c05b080645ed73db7391c246ed # v2.0.0
2222
env:
2323
JIRA_BASE_URL: ${{ secrets.JIRA_BASE_URL }}
2424
JIRA_USER_EMAIL: ${{ secrets.JIRA_USER_EMAIL }}
@@ -27,7 +27,7 @@ jobs:
2727
- name: Jira Create issue
2828
if: env.JIRA_CREATE_ISSUE_AUTO == 'true'
2929
id: create_jira_issue
30-
uses: atlassian/gajira-create@v2.0.1
30+
uses: atlassian/gajira-create@c0a9c69ac9d6aa063fed57201e55336ada860183 # v2.0.1
3131
with:
3232
project: ${{ secrets.JIRA_PROJECT }}
3333
issuetype: ${{ secrets.JIRA_ISSUE_TYPE }}
@@ -53,7 +53,7 @@ jobs:
5353
5454
- name: Update GitHub issue
5555
if: env.JIRA_CREATE_ISSUE_AUTO == 'true'
56-
uses: actions/github-script@v2.0.0
56+
uses: actions/github-script@6e5ee1dc1cb3740e5e5e76ad668e3f526edbfe45 # v2.0.0
5757
env:
5858
JIRA_ISSUE_NUMBER: ${{ steps.create_jira_issue.outputs.issue }}
5959
GITHUB_ORIGINAL_TITLE: ${{ github.event.issue.title }}
@@ -78,7 +78,7 @@ jobs:
7878
7979
- name: Add comment after sync
8080
if: env.JIRA_CREATE_ISSUE_AUTO == 'true'
81-
uses: actions/github-script@v2.0.0
81+
uses: actions/github-script@6e5ee1dc1cb3740e5e5e76ad668e3f526edbfe45 # v2.0.0
8282
with:
8383
github-token: ${{secrets.GITHUB_TOKEN}}
8484
script: |

‎.github/workflows/create_issue_on_label.yml‎

Lines changed: 4 additions & 4 deletions

0 commit comments

Comments
 (0)