Copilot
|
45b37ffcff
|
Pin dependencies to mitigate supply chain attacks (#1861)
* Initial plan
* Pin GitHub Actions and Docker images to specific hashes for security
Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com>
* Pin pip, poetry, and other build tool versions for security
Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com>
* Add comprehensive dependency pinning security documentation
Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com>
* Fix CI: Replace incorrect setup-python SHA with v6 tag
Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com>
* Update dependency pinning docs to reflect pragmatic approach
Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com>
* Fix CI: Replace invalid codeql-action and security-devops-action SHAs with version tags
Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com>
* Update docs to list all actions using version tags
Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com>
* Fix CI: Replace invalid py-cov-action SHA with version tag
Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com>
* Update docs to include py-cov-action in version tag list
Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com>
* Remove DEPENDENCY_PINNING.md as requested by maintainer
Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com>
* Pin actions/setup-python to commit SHA e797f83 (v6.0.0)
Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com>
* Pin codeql-action, security-devops-action, and py-cov-action to commit SHAs
Co-authored-by: tamirkamara <26870601+tamirkamara@users.noreply.github.com>
* Remove all pip upgrade commands as requested
Co-authored-by: tamirkamara <26870601+tamirkamara@users.noreply.github.com>
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com>
Co-authored-by: Sharon Hart <sharonh.dev@gmail.com>
Co-authored-by: tamirkamara <26870601+tamirkamara@users.noreply.github.com>
|
2026-02-16 11:06:54 +02:00 |
|