Skip to content

GitHub Actions hardening#290

Merged
nunomaduro merged 1 commit into
4.xfrom
chore/github-actions-hardening
Jun 3, 2026
Merged

GitHub Actions hardening#290
nunomaduro merged 1 commit into
4.xfrom
chore/github-actions-hardening

Conversation

@nunomaduro

Copy link
Copy Markdown
Member

We are doing 3 things across the organization:

  1. Pinning GitHub Actions to full commit SHAs (instead of mutable tags/branches).
  2. Tightening workflow permissions: to least-privilege (write scope only where a step needs it).
  3. Adding a Dependabot config to keep the pinned actions updated.

This pull request is part of that work.

@nunomaduro nunomaduro merged commit 72217aa into 4.x Jun 3, 2026
19 checks passed
@nunomaduro nunomaduro deleted the chore/github-actions-hardening branch June 3, 2026 08:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant