Skip to content

Add helpers:pinGitHubActionDigests to org-wide Renovate config - #85

Closed
jsmid1 wants to merge 1 commit into
mainfrom
EC-2080
Closed

Add helpers:pinGitHubActionDigests to org-wide Renovate config#85
jsmid1 wants to merge 1 commit into
mainfrom
EC-2080

Conversation

@jsmid1

@jsmid1 jsmid1 commented Aug 26, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Adds helpers:pinGitHubActionDigests preset to the shared org-wide Renovate config
  • This ensures all conforma repos get automatic GitHub Action SHA pinning for security
  • Previously only configured locally in conforma/cli (via EC-2045)

Context

Stefano suggested promoting this org-wide since it's relevant to all repos (feedback on cli#3463).

A follow-up PR in conforma/cli removes the now-redundant local override.

Resolves: EC-2080

Pin GitHub Actions to SHA digests across all conforma repos for
security. Previously only configured in conforma/cli locally.

Resolves: EC-2080

Co-authored-by: Claude <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Aug 26, 2026

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 8863bd71-ab41-43b0-9701-e73a7f613959


Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant