Pin GitHub Actions to commit SHAs in js-bson

XMLWordPrintableJSON

    • Type: Sub-task
    • Resolution: Unresolved
    • Priority: Unknown
    • None
    • Affects Version/s: None
    • Component/s: None
    • 0
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Pin every uses: reference in js-bson to a full 40-character commit SHA, keeping the version as a trailing comment.

      Implementation Requirements

      • Cover every workflow, including release and CodeQL
      • Confirm dependabot is configured to bump pinned SHAs

      Testing Requirements

      • All workflows pass after pinning

            Assignee:
            Unassigned
            Reporter:
            Sergey Zelenov
            None
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: