-
-
Notifications
You must be signed in to change notification settings - Fork 52
Commit
- Loading branch information
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -41,15 +41,15 @@ jobs: | |
|
|
||
| steps: | ||
| - name: Harden Runner | ||
| uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 | ||
| uses: step-security/harden-runner@v2 | ||
|
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 4: third-party GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io Click Remediation section below for further remediation help |
||
| with: | ||
| egress-policy: audit | ||
|
|
||
| - name: Checkout code | ||
| uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 | ||
| uses: actions/checkout@v4 | ||
|
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 4: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io Click Remediation section below for further remediation help |
||
|
|
||
| - name: Setup Python 3.10 | ||
| uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0 | ||
| uses: actions/setup-python@v5 | ||
|
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 4: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io Click Remediation section below for further remediation help |
||
| with: | ||
| python-version: '3.10' | ||
|
|
||
|
|
@@ -102,15 +102,15 @@ jobs: | |
|
|
||
| steps: | ||
| - name: Harden Runner | ||
| uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 | ||
| uses: step-security/harden-runner@v2 | ||
|
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 4: third-party GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io Click Remediation section below for further remediation help |
||
| with: | ||
| egress-policy: audit | ||
|
|
||
| - name: Checkout code | ||
| uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 | ||
| uses: actions/checkout@v4 | ||
|
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 4: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io Click Remediation section below for further remediation help |
||
|
|
||
| - name: Setup python 3.10 | ||
| uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0 | ||
| uses: actions/setup-python@v5 | ||
|
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 4: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io Click Remediation section below for further remediation help |
||
| with: | ||
| python-version: '3.10' | ||
|
|
||
|
|
@@ -215,7 +215,7 @@ jobs: | |
|
|
||
| steps: | ||
| - name: Harden Runner | ||
| uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 | ||
| uses: step-security/harden-runner@v2 | ||
|
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 4: third-party GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io Click Remediation section below for further remediation help |
||
| with: | ||
| egress-policy: audit | ||
|
|
||
|
|
@@ -226,7 +226,7 @@ jobs: | |
| target_platform: ${{ matrix.target }} | ||
|
|
||
| - name: Retrieve source code | ||
| uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 | ||
| uses: actions/checkout@v4 | ||
|
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 4: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io Click Remediation section below for further remediation help |
||
|
|
||
| - name: Compile source code | ||
| shell: bash | ||
|
|
@@ -296,12 +296,12 @@ jobs: | |
|
|
||
| steps: | ||
| - name: Harden Runner | ||
| uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 | ||
| uses: step-security/harden-runner@v2 | ||
|
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 4: third-party GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io Click Remediation section below for further remediation help |
||
| with: | ||
| egress-policy: audit | ||
|
|
||
| - name: "Checkout code" | ||
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | ||
| uses: actions/checkout@v4 | ||
|
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 4: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io Click Remediation section below for further remediation help |
||
| with: | ||
| persist-credentials: false | ||
|
|
||
|
|
||