Consisely describe the feature.
Using tag may result in security breaches, because the tag is same and there is a possibility that someone push malicious code into the github action and since we are using the same tag, our repo may end up using that malicious code, which may result in breaches.
The solution would be to enforce commit hash, ideally at repository level.
In case anyone is interested in how to do it, I am attaching a github article for this: https://docs.github.com/actions/reference/security/secure-use#using-third-party-actions
Upload screenshots
Add screenshots or proposed mockups (optional).
LLM Policy
Consisely describe the feature.
Using tag may result in security breaches, because the tag is same and there is a possibility that someone push malicious code into the github action and since we are using the same tag, our repo may end up using that malicious code, which may result in breaches.
The solution would be to enforce commit hash, ideally at repository level.
In case anyone is interested in how to do it, I am attaching a github article for this: https://docs.github.com/actions/reference/security/secure-use#using-third-party-actions
Upload screenshots
Add screenshots or proposed mockups (optional).
LLM Policy