-
Notifications
You must be signed in to change notification settings - Fork 6
chore: remove apps/site, now owned by the private site repository #95
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🔒 Security & Privacy | 🟠 Major | ⚡ Quick win
Pin every GitHub Action to an immutable commit SHA.
This workflow still uses mutable refs, including
actions/checkout@v6,pnpm/action-setup@v6,actions/setup-node@v6,actions/upload-artifact@v7, andactions/download-artifact@v8. Replace eachuses:ref with its full commit SHA. Keep the version in a comment if needed for update tracking.As per path instructions:
.github/workflows/**requires checking for unpinned third-party actions. Based on learnings: all third-party and GitHub Actions references must use full commit SHAs rather than mutable version tags.🤖 Prompt for AI Agents
Sources: Path instructions, Learnings