Skip to content

Pin npm action to hash commit following best GH Action practices #45547

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 10, 2025

Conversation

potiuk
Copy link
Member

@potiuk potiuk commented Jan 10, 2025

This was found by the CodeQL Actions scanning


^ Add meaningful description above
Read the Pull Request Guidelines for more information.
In case of fundamental code changes, an Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in a newsfragment file, named {pr_number}.significant.rst or {issue_number}.significant.rst, in newsfragments.

This was found by the CodeQL Actions scanning
@potiuk potiuk merged commit 378e358 into apache:main Jan 10, 2025
8 checks passed
@potiuk potiuk deleted the pin-pnpm-action branch January 10, 2025 10:19
potiuk added a commit to potiuk/airflow that referenced this pull request Jan 10, 2025
potiuk added a commit that referenced this pull request Jan 10, 2025
karenbraganz pushed a commit to karenbraganz/airflow that referenced this pull request Jan 13, 2025
karenbraganz pushed a commit to karenbraganz/airflow that referenced this pull request Jan 13, 2025
HariGS-DB pushed a commit to HariGS-DB/airflow that referenced this pull request Jan 16, 2025
HariGS-DB pushed a commit to HariGS-DB/airflow that referenced this pull request Jan 16, 2025
dauinh pushed a commit to dauinh/airflow that referenced this pull request Jan 24, 2025
dauinh pushed a commit to dauinh/airflow that referenced this pull request Jan 24, 2025
got686-yandex pushed a commit to got686-yandex/airflow that referenced this pull request Jan 30, 2025
got686-yandex pushed a commit to got686-yandex/airflow that referenced this pull request Jan 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants