Skip to content

Conversation

@jespino
Copy link

@jespino jespino commented Dec 15, 2025

Pin all external GitHub Actions to specific commit SHAs for supply chain security.

Changes

  • actions/checkout@v4 → pinned to SHA
  • actions/setup-go@v5 → pinned to SHA

Pin all external GitHub Actions to specific commit SHAs.

Changes:
- actions/checkout@v4 → pinned to SHA
- actions/setup-go@v5 → pinned to SHA

Co-authored-by: Ona <[email protected]>
@easyCZ
Copy link
Member

easyCZ commented Dec 15, 2025

Ideally, this is also done on the SDK upstream repo, which is https://github.com/stainless-sdks/gitpod-go/tree/next and it then flows into this repo

@jespino jespino marked this pull request as ready for review December 15, 2025 17:32
@jespino
Copy link
Author

jespino commented Dec 15, 2025

@easyCZ this give me a 404 https://github.com/stainless-sdks/gitpod-go

@easyCZ
Copy link
Member

easyCZ commented Dec 16, 2025

login via https://app.stainless.com/gitpod/gitpod and request access there

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants