Pin GitHub Actions to commit SHAs in node-mongodb-native

XMLWordPrintableJSON

    • Type: Sub-task
    • Resolution: Unresolved
    • Priority: Unknown
    • None
    • Affects Version/s: None
    • Component/s: None
    • 0
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Pin every uses: reference in node-mongodb-native to a full 40-character commit SHA, keeping the version as a trailing comment.

      Implementation Requirements

      • Cover every workflow, including release and CodeQL
      • Confirm dependabot is configured to bump pinned SHAs

      Testing Requirements

      • All workflows pass after pinning

      Note: mongodb-labs/drivers-github-tools references can be pinned at our call site, but that action uses mutable tags internally. See GODRIVER-3790.

            Assignee:
            Unassigned
            Reporter:
            Sergey Zelenov
            None
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: