chore(maintenance): add --require-hashes flag to pip installs (#1827) #436
dreamorosiAnnotations
11 warnings
|
Harden Security
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab, zgosalvez/github-actions-ensure-sha-pinned-actions@21991cec25093947ff3f62e4c223df0260c39944. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
Harden Security
The "get_pr_details" job of the "label_pr_on_title.yml" workflow does not contain uses or steps.
|
|
Harden Security
The "run-unit-tests" job of the "make-release.yml" workflow does not contain uses or steps.
|
|
Harden Security
The "publish_layer" job of the "make-release.yml" workflow does not contain uses or steps.
|
|
Harden Security
The "run-unit-tests" job of the "make-v2-release.yml" workflow does not contain uses or steps.
|
|
Harden Security
The "release-docs" job of the "on-doc-v2-merge.yml" workflow does not contain uses or steps.
|
|
Harden Security
The "get_pr_details" job of the "on-merge-to-main.yml" workflow does not contain uses or steps.
|
|
Harden Security
The "run-unit-tests" job of the "on-merge-to-main.yml" workflow does not contain uses or steps.
|
|
Harden Security
The "release-docs" job of the "on_doc_merge.yml" workflow does not contain uses or steps.
|
|
Harden Security
The "get_pr_details" job of the "on_opened_pr.yml" workflow does not contain uses or steps.
|
|
Harden Security
The "run-unit-tests" job of the "pr-run-linting-check-and-unit-tests.yml" workflow does not contain uses or steps.
|