Skip to content

ci: pin GitHub Actions to immutable SHAs - #3096

Open
AmedeeBulle wants to merge 3 commits into
oracle:mainfrom
AmedeeBulle:sha-pin
Open

AmedeeBulle wants to merge 3 commits into
oracle:mainfrom
AmedeeBulle:sha-pin

Conversation

@AmedeeBulle

Copy link
Copy Markdown
Member

Summary

  • Pin all external GitHub Actions to full-length commit SHAs.
  • Upgrade Checkout and Docker actions to their latest backward-compatible releases.
  • Move Super Linter to the upstream repository and pin v7.4.0.
  • Retain release-version comments beside each SHA for readability.

Super Linter v8 was not selected because it includes documented breaking lint and configuration changes.

Validation

  • Confirmed all 28 external action references use full 40-character SHAs.
  • Verified each SHA against its official release tag.
  • Parsed all six workflow files successfully.
  • Confirmed the diff contains only action reference updates.

Signed-off-by: Philippe Vanhaesendonck <philippe.vanhaesendonck@oracle.com>
@oracle-contributor-agreement oracle-contributor-agreement Bot added the OCA Verified All contributors have signed the Oracle Contributor Agreement. label Jul 8, 2026
@AmedeeBulle
AmedeeBulle requested a review from gvenzl July 8, 2026 10:19
Signed-off-by: Philippe Vanhaesendonck <philippe.vanhaesendonck@oracle.com>
Signed-off-by: Philippe Vanhaesendonck <philippe.vanhaesendonck@oracle.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

OCA Verified All contributors have signed the Oracle Contributor Agreement.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant