-
Type:
Sub-task
-
Resolution: Unresolved
-
Priority:
Unknown
-
None
-
Affects Version/s: None
-
Component/s: None
-
0
-
None
-
None
-
None
-
None
-
None
-
None
-
None
Pin every uses: reference in mongodb-connection-string-url to a full 40-character commit SHA, keeping the version as a trailing comment.
Implementation Requirements
- Cover every workflow, including release and CodeQL
- Confirm dependabot is configured to bump pinned SHAs
Testing Requirements
- All workflows pass after pinning