Skip to content

fix: replace deprecated set-output in auto-format.yml#18

Merged
sionsmith merged 1 commit into
mainfrom
fix/pin-actions-and-fix-set-output
Apr 4, 2026
Merged

fix: replace deprecated set-output in auto-format.yml#18
sionsmith merged 1 commit into
mainfrom
fix/pin-actions-and-fix-set-output

Conversation

@sionsmith

@sionsmith sionsmith commented Apr 4, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Pin all GitHub Actions to immutable commit SHAs
  • Replace deprecated ::set-output with $GITHUB_OUTPUT
  • Add explicit permissions blocks where missing

Context

Org-wide supply chain hardening after the ezmtebo incident (2026-04-02).

Generated with Claude Code

@sionsmith @claude
fix: pin actions to commit SHAs, fix deprecated set-output
c299fbd 
Pin all GitHub Actions to immutable commit SHAs instead of mutable
tags (@master, @v1, @v2, etc). Replace deprecated ::set-output with
$GITHUB_OUTPUT. Add explicit permissions blocks.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@sionsmith
sionsmith merged commit 39964ec into main Apr 4, 2026
1 check failed
@sionsmith
sionsmith deleted the fix/pin-actions-and-fix-set-output branch April 4, 2026 07:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@sionsmith