fix: use commit SHA instead of tags for actions#1066
fix: use commit SHA instead of tags for actions#1066k8s-ci-robot merged 2 commits intokubernetes:masterfrom
Conversation
I think k8s repos started to enforce using commit SHA (which makes sense from security perspective) because the workflow is currently failing with `The action actions/checkout@v4 is not allowed in kubernetes/cloud-provider-gcp because all actions must be pinned to a full-length commit SHA.` Also update dependabot to handle github actions.
k8s-ci-robot
added
the
needs-triage
|
This issue is currently awaiting triage. If the repository mantainers determine this is a relevant issue, they will accept it by applying the The DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
k8s-ci-robot
added
the
approved
k8s-ci-robot
added
size/S
|
/assign LogicalShark |
|
/lgtm |
|
/approve |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: hdp617, LogicalShark The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
/lgtm |
k8s-ci-robot
added
the
lgtm
|
/cherry-pick release-1.35 |
|
@hdp617: #1066 failed to apply on top of branch "release-1.35": DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
* fix: use commit SHA instead of tags for actions I think k8s repos started to enforce using commit SHA (which makes sense from security perspective) because the workflow is currently failing with `The action actions/checkout@v4 is not allowed in kubernetes/cloud-provider-gcp because all actions must be pinned to a full-length commit SHA.` Also update dependabot to handle github actions. * fix: use commit SHA for actions/setup-go
* fix: use commit SHA instead of tags for actions I think k8s repos started to enforce using commit SHA (which makes sense from security perspective) because the workflow is currently failing with `The action actions/checkout@v4 is not allowed in kubernetes/cloud-provider-gcp because all actions must be pinned to a full-length commit SHA.` Also update dependabot to handle github actions. * fix: use commit SHA for actions/setup-go
4 participants
I think k8s repos started to enforce using commit SHA (which makes sense from security perspective) because the workflow is currently failing with
The action actions/checkout@v4 is not allowed in kubernetes/cloud-provider-gcp because all actions must be pinned to a full-length commit SHA.Also update dependabot to handle github actions.