Skip to content

fix(ci): harden GitHub Actions workflows (#221) - #222

Merged
paulinebm merged 1 commit into
worktree-upload-feature-flagfrom
security/workflow-hardening/pr-221
Sep 22, 2026
Merged

paulinebm merged 1 commit into
worktree-upload-feature-flagfrom
security/workflow-hardening/pr-221

Conversation

@hf-security-analysis

@hf-security-analysis hf-security-analysis Bot commented Sep 22, 2026 •

Copy link
Copy Markdown
Contributor

Automated hardening of the workflow files flagged on #221.

Targets worktree-upload-feature-flag. Files changed, and what changed them:

  • .github/workflows/rust.yml — action pins

Fixed by this PR:

  • HIGH unpinned-action (pinact) — .github/workflows/rust.yml:25
  • HIGH unpinned-action (pinact) — .github/workflows/rust.yml:46
  • HIGH unpinned-action (pinact) — .github/workflows/rust.yml:72
  • HIGH unpinned-action (pinact) — .github/workflows/rust.yml:118
  • HIGH unpinned-action (pinact) — .github/workflows/rust.yml:156
  • HIGH unpinned-action (pinact) — .github/workflows/rust.yml:177
  • HIGH unpinned-action (pinact) — .github/workflows/rust.yml:219
  • HIGH unpinned-action (pinact) — .github/workflows/rust.yml:241

Pinning changes come from pinact and are mechanical. Any other change was generated by Claude — read it before merging.

@paulinebm
paulinebm merged commit 9ac31bb into worktree-upload-feature-flag Sep 22, 2026
9 of 10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant