Skip to content

renovate: Pin GitHub Action digests#727

Merged
bkeryan merged 1 commit intomasterfrom
users/bkeryan/renovate-pin-digests
May 23, 2025
Merged

renovate: Pin GitHub Action digests#727
bkeryan merged 1 commit intomasterfrom
users/bkeryan/renovate-pin-digests

Conversation

@bkeryan
Copy link
Copy Markdown
Collaborator

@bkeryan bkeryan commented May 22, 2025

  • This contribution adheres to CONTRIBUTING.md.
  • I've updated CHANGELOG.md if applicable.
  • I've added tests applicable for this pull request

What does this Pull Request accomplish?

Enable helpers:pinGitHubActionDigestsToSemver, which causes Renovate to do two things:

  • Replace actions/whatever@v3 with actions/whatever@<sha-hash> # v3
  • Replace actions/whatever@<sha-hash> # v3 with actions/whatever@<sha-hash> # v3.1.7

Why should this Pull Request be merged?

Pinning GitHub action digests improves build reproducibility and is a security best practice.

What testing has been done?

Tested in https://github.com/ni/nitypes-python/blob/main/.github/renovate.json

@bkeryan bkeryan enabled auto-merge (squash) May 22, 2025 23:42
@github-actions
Copy link
Copy Markdown
Contributor

Test Results

    34 files  ±0      34 suites  ±0   56m 47s ⏱️ + 1m 34s
 2 461 tests ±0   2 091 ✅ ±0    370 💤 ±0  0 ❌ ±0 
43 920 runs  ±0  37 508 ✅ ±0  6 412 💤 ±0  0 ❌ ±0 

Results for commit f3e8754. ± Comparison against base commit 1b59ca3.

@bkeryan bkeryan merged commit 99ec649 into master May 23, 2025
17 checks passed
@bkeryan bkeryan deleted the users/bkeryan/renovate-pin-digests branch January 7, 2026 23:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants