You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@beam.apache.org by "XananasX7 (via GitHub)" <gi...@apache.org> on 2026/06/28 04:21:58 UTC
[PR] ci: pin GitHub Actions to full commit SHAs [beam]
XananasX7 opened a new pull request, #39140:
URL: https://github.com/apache/beam/pull/39140
Pin unpinned GitHub Actions to immutable commit SHAs. Defense against supply-chain attacks via mutable tags. Version tags retained as inline comments. See: https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ci: pin GitHub Actions to full commit SHAs [beam]
Posted by "damccorm (via GitHub)" <gi...@apache.org>.
damccorm commented on PR #39140:
URL: https://github.com/apache/beam/pull/39140#issuecomment-4897586827
Thanks for the contribution - we will not take this though. This does create a small risk vector for compromised actions; however, this is generally acceptable because our environment is sufficiently sandboxed and the downside (losing automatic action upgrades) is not appealing
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ci: pin GitHub Actions to full commit SHAs [beam]
Posted by "damccorm (via GitHub)" <gi...@apache.org>.
damccorm closed pull request #39140: ci: pin GitHub Actions to full commit SHAs
URL: https://github.com/apache/beam/pull/39140
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ci: pin GitHub Actions to full commit SHAs [beam]
Posted by "gemini-code-assist[bot] (via GitHub)" <gi...@apache.org>.
gemini-code-assist[bot] commented on PR #39140:
URL: https://github.com/apache/beam/pull/39140#issuecomment-4824759288
> [!NOTE]
> Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@beam.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org