Antoine du Hamel c7c8d8683a tools: use hashes instead of tags for external actions (#43284) ...

Using tags is a security risk, as they can be updated to point to
anything else.

Refs: https://github.com/nodejs/corepack/pull/117#discussion_r886913592

PR-URL: https://github.com/nodejs/node/pull/43284
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>

2022-06-05 21:45:18 +02:00

..

authors.yml

tools: use hashes instead of tags for external actions (#43284)

2022-06-05 21:45:18 +02:00

auto-start-ci.yml

tools: update GHA actions version

2022-03-30 14:07:02 +01:00

build-tarball.yml

tools: update GHA actions version

2022-03-30 14:07:02 +01:00

build-windows.yml

build: disable windows-2022 temporarily

2022-05-14 08:47:47 -07:00

close-stale-feature-requests.yml

build: set stale action back to running nightly

2022-04-03 16:27:12 +01:00

close-stalled.yml

build,tools: change the quotes in YAML

2022-02-14 19:09:17 +01:00

comment-labeled.yml

build: revert fast-track changes

2022-02-08 17:05:00 +01:00

commit-lint-problem-matcher.json

build: use Actions to validate commit message

2021-06-22 10:20:59 -07:00

commit-lint.yml

tools: update GHA actions version

2022-03-30 14:07:02 +01:00

commit-queue.yml

tools: update GHA actions version

2022-03-30 14:07:02 +01:00

coverage-linux.yml

tools: update codecov/codecov-action version

2022-06-02 15:17:43 +02:00

coverage-windows.yml

tools: update codecov/codecov-action version

2022-06-02 15:17:43 +02:00

daily.yml

tools: update GHA actions version

2022-03-30 14:07:02 +01:00

doc.yml

tools: update GHA actions version

2022-03-30 14:07:02 +01:00

find-inactive-collaborators.yml

tools: use hashes instead of tags for external actions (#43284)

2022-06-05 21:45:18 +02:00

find-inactive-tsc.yml

tools: use hashes instead of tags for external actions (#43284)

2022-06-05 21:45:18 +02:00

label-pr.yml

tools: pass bot token to node-pr-labeler

2021-07-09 17:02:49 +02:00

license-builder.yml

tools: use hashes instead of tags for external actions (#43284)

2022-06-05 21:45:18 +02:00

linters.yml

tools: use hashes instead of tags for external actions (#43284)

2022-06-05 21:45:18 +02:00

notify-force-push.yml

tools: use hashes instead of tags for external actions (#43284)

2022-06-05 21:45:18 +02:00

remark-lint-problem-matcher.json

build: annotate markdown lint failures in pull requests

2020-03-24 12:21:03 -04:00

test-asan.yml

build: set ASAN workaround

2022-05-14 22:05:55 -07:00

test-internet.yml

tools: update GHA actions version

2022-03-30 14:07:02 +01:00

test-linux.yml

tools: update GHA actions version

2022-03-30 14:07:02 +01:00

test-macos.yml

tools: update GHA actions version

2022-03-30 14:07:02 +01:00

tools.yml

tools: use hashes instead of tags for external actions (#43284)

2022-06-05 21:45:18 +02:00