Skip to content

Commit

Permalink
🔨 use prerelease github actions internally
Browse files Browse the repository at this point in the history
Signed-off-by: rjdbcm <[email protected]>
  • Loading branch information
rjdbcm committed Sep 8, 2024
1 parent 10b6732 commit 14bc5fe
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 9 deletions.
6 changes: 3 additions & 3 deletions .github/workflows/dev-workflow.yml
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@ jobs:
rekor.sigstore.dev:443
tuf-repo-cdn.sigstore.dev:443
- uses: OZI-Project/checkpoint@cd1117d2d6d352e52d9dfdb603b8ebd7ef964908
- uses: OZI-Project/checkpoint@1.0.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: third-party GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
python-version: "3.10"

Expand Down Expand Up @@ -66,7 +66,7 @@ jobs:
rekor.sigstore.dev:443
tuf-repo-cdn.sigstore.dev:443
- uses: OZI-Project/checkpoint@cd1117d2d6d352e52d9dfdb603b8ebd7ef964908
- uses: OZI-Project/checkpoint@1.0.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: third-party GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
python-version: "3.11"

Expand Down Expand Up @@ -95,6 +95,6 @@ jobs:
rekor.sigstore.dev:443
tuf-repo-cdn.sigstore.dev:443
- uses: OZI-Project/checkpoint@cd1117d2d6d352e52d9dfdb603b8ebd7ef964908
- uses: OZI-Project/checkpoint@1.0.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: third-party GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
python-version: "3.12"
12 changes: 6 additions & 6 deletions .github/workflows/dist-workflow.yml
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ jobs:
rekor.sigstore.dev:443
tuf-repo-cdn.sigstore.dev:443
- uses: OZI-Project/checkpoint@cd1117d2d6d352e52d9dfdb603b8ebd7ef964908
- uses: OZI-Project/checkpoint@1.0.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: third-party GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
python-version: "3.10"
parallel: false
Expand Down Expand Up @@ -69,7 +69,7 @@ jobs:
rekor.sigstore.dev:443
tuf-repo-cdn.sigstore.dev:443
- uses: OZI-Project/checkpoint@cd1117d2d6d352e52d9dfdb603b8ebd7ef964908
- uses: OZI-Project/checkpoint@1.0.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: third-party GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
python-version: "3.11"
parallel: false
Expand Down Expand Up @@ -99,7 +99,7 @@ jobs:
rekor.sigstore.dev:443
tuf-repo-cdn.sigstore.dev:443
- uses: OZI-Project/checkpoint@cd1117d2d6d352e52d9dfdb603b8ebd7ef964908
- uses: OZI-Project/checkpoint@1.0.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: third-party GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
python-version: "3.12"
parallel: false
Expand Down Expand Up @@ -136,7 +136,7 @@ jobs:
api.github.com:443
github.com:443
- uses: OZI-Project/draft@7e8ad70f472504510e169567e97db01bdafe2533
- uses: OZI-Project/draft@1.0.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 6: third-party GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
id: draft
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
Expand Down Expand Up @@ -180,7 +180,7 @@ jobs:
cdn03.quay.io:443
downloads.python.org:443
- uses: OZI-Project/release@4277e29de16b07dac4a89c8f7970c2da65554d17
- uses: OZI-Project/release@1.0.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 7: third-party GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
id: release
with:
tag: ${{ needs.draft.outputs.tag }}
Expand Down Expand Up @@ -221,6 +221,6 @@ jobs:
upload.pypi.org:443
uploads.github.com:443
- uses: OZI-Project/publish@55904e4f59084e7c6ccfad7b158db52a360e1f54
- uses: OZI-Project/publish@1.0.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 6: third-party GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
github-token: ${{ secrets.GITHUB_TOKEN }}

0 comments on commit 14bc5fe

Please sign in to comment.