You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by "oscerd (via GitHub)" <gi...@apache.org> on 2024/09/03 05:42:09 UTC
[PR] Github Actions Security Best practices: Pin Actions to Full lenght C… [camel-quarkus]
oscerd opened a new pull request, #6406:
URL: https://github.com/apache/camel-quarkus/pull/6406
…ommit SHA - Assign milestone workflow
<!-- Uncomment and fill this section if your PR is not trivial
[ ] An issue should be filed for the change unless this is a trivial change (fixing a typo or similar). One issue should ideally be fixed by not more than one commit and the other way round, each commit should fix just one issue, without pulling in other changes.
[x] Each commit in the pull request should have a meaningful and properly spelled subject line and body. Copying the title of the associated issue is typically enough. Please include the issue number in the commit message prefixed by #.
[x] The pull request description should explain what the pull request does, how, and why. If the info is available in the associated issue or some other external document, a link is enough.
[ ] Phrases like Fix #<issueNumber> or Fixes #<issueNumber> will auto-close the named issue upon merging the pull request. Using them is typically a good idea.
[ ] Please run mvn process-resources -Pformat (and amend the changes if necessary) before sending the pull request.
[ ] Contributor guide is your good friend: https://camel.apache.org/camel-quarkus/latest/contributor-guide.html
-->
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Github Actions Security Best practices: Pin Actions to Full lenght C… [camel-quarkus]
Posted by "ppalaga (via GitHub)" <gi...@apache.org>.
ppalaga commented on PR #6406:
URL: https://github.com/apache/camel-quarkus/pull/6406#issuecomment-2325850408
Makes sense, thanks a lot!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Github Actions Security Best practices: Pin Actions to Full lenght C… [camel-quarkus]
Posted by "oscerd (via GitHub)" <gi...@apache.org>.
oscerd commented on PR #6406:
URL: https://github.com/apache/camel-quarkus/pull/6406#issuecomment-2325848119
@ppalaga https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
It's suggested to do this for third party, it's not crucial, but even for dependabot it doesn't change that much, it will point the new commit sha on new releases.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Github Actions Security Best practices: Pin Actions to Full lenght C… [camel-quarkus]
Posted by "oscerd (via GitHub)" <gi...@apache.org>.
oscerd commented on PR #6406:
URL: https://github.com/apache/camel-quarkus/pull/6406#issuecomment-2325858982
I forgot to add the link to the hardening guide. Sorry.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Github Actions Security Best practices: Pin Actions to Full lenght C… [camel-quarkus]
Posted by "oscerd (via GitHub)" <gi...@apache.org>.
oscerd merged PR #6406:
URL: https://github.com/apache/camel-quarkus/pull/6406
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Github Actions Security Best practices: Pin Actions to Full lenght C… [camel-quarkus]
Posted by "ppalaga (via GitHub)" <gi...@apache.org>.
ppalaga commented on PR #6406:
URL: https://github.com/apache/camel-quarkus/pull/6406#issuecomment-2325824348
@oscerd could you please explain, why is this a good practice?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org