Skip to content

Commit 7b9d604

Browse files
CopilotMariusStorhaug
Copilot
and
MariusStorhaug
authored
Bump actions/checkout from 5 to 6 with SHA pinning (#68)
Bumps actions/checkout from v5 to v6 and pins all actions to commit SHAs for security hardening. ## Changes - **SHA pinning with version comments** for all actions: - `actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6` - `PSModule/Auto-Release@eabd533035e2cb9822160f26f2eda584bd012356 # v1` - `super-linter/super-linter@2bdd90ed3262e023ac84bf8fe35dc480721fc1f2 # v8` - `azure/login@1384c340ab2dda50fed2bee3041d1d87018aa5e8 # v2` - **Added `persist-credentials: false`** to all checkout steps ```yaml - name: Checkout repo uses: actions/checkout@1af3b93 # v6 with: persist-credentials: false ``` <!-- START COPILOT CODING AGENT TIPS --> --- 💬 We'd love your input! Share your thoughts on Copilot coding agent in our [2 minute survey](https://gh.io/copilot-coding-agent-survey). --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: MariusStorhaug <17722253+MariusStorhaug@users.noreply.github.com>
1 parent d4f4184 commit 7b9d604

File tree

3 files changed

+48
-32
lines changed

3 files changed

+48
-32
lines changed

‎.github/workflows/Auto-Release.yml‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,9 +26,11 @@ jobs:
2626
runs-on: ubuntu-latest
2727
steps:
2828
- name: Checkout Code
29-
uses: actions/checkout@v6
29+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
30+
with:
31+
persist-credentials: false
3032

3133
- name: Auto-Release
32-
uses: PSModule/Auto-Release@v1
34+
uses: PSModule/Auto-Release@eabd533035e2cb9822160f26f2eda584bd012356 # v1
3335
env:
3436
GITHUB_TOKEN: ${{ github.token }}

‎.github/workflows/Linter.yml‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,12 +19,13 @@ jobs:
1919
runs-on: ubuntu-latest
2020
steps:
2121
- name: Checkout repo
22-
uses: actions/checkout@v6
22+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
2323
with:
24+
persist-credentials: false
2425
fetch-depth: 0
2526

2627
- name: Lint code base
27-
uses: super-linter/super-linter@latest
28+
uses: super-linter/super-linter@2bdd90ed3262e023ac84bf8fe35dc480721fc1f2 # v8
2829
env:
2930
GITHUB_TOKEN: ${{ github.token }}
3031
VALIDATE_JSON_PRETTIER: false

‎.github/workflows/TestWorkflow.yml‎

Lines changed: 41 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -53,8 +53,9 @@ jobs:
5353
steps:
5454
# Need to check out as part of the test, as its a local action
5555
- name: Checkout repo
56-
uses: actions/checkout@v6
57-
56+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
57+
with:
58+
persist-credentials: false
5859
- name: Action-Test
5960
uses: ./
6061
with:
@@ -76,8 +77,9 @@ jobs:
7677
steps:
7778
# Need to check out as part of the test, as its a local action
7879
- name: Checkout repo
79-
uses: actions/checkout@v6
80-
80+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
81+
with:
82+
persist-credentials: false
8183
# # Not a supported way of running the action
8284
# # This syntax is specifically for using a function in a specific module
8385
# # i.e.: moduleName\functionName
@@ -144,8 +146,9 @@ jobs:
144146
steps:
145147
# Need to check out as part of the test, as its a local action
146148
- name: Checkout repo
147-
uses: actions/checkout@v6
148-
149+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
150+
with:
151+
persist-credentials: false
149152
- name: Action-Test
150153
uses: ./
151154
id: test
@@ -324,8 +327,9 @@ jobs:
324327
steps:
325328
# Need to check out as part of the test, as its a local action
326329
- name: Checkout repo
327-
uses: actions/checkout@v6
328-
330+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
331+
with:
332+
persist-credentials: false
329333
- name: Action-Test
330334
uses: ./
331335
id: test
@@ -386,8 +390,9 @@ jobs:
386390
steps:
387391
# Need to check out as part of the test, as its a local action
388392
- name: Checkout repo
389-
uses: actions/checkout@v6
390-
393+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
394+
with:
395+
persist-credentials: false
391396
- name: Action-Test
392397
uses: ./
393398
with:
@@ -404,8 +409,9 @@ jobs:
404409
steps:
405410
# Need to check out as part of the test, as its a local action
406411
- name: Checkout repo
407-
uses: actions/checkout@v6
408-
412+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
413+
with:
414+
persist-credentials: false
409415
- name: Action-Test
410416
uses: ./
411417
with:
@@ -430,8 +436,9 @@ jobs:
430436
steps:
431437
# Need to check out as part of the test, as its a local action
432438
- name: Checkout repo
433-
uses: actions/checkout@v6
434-
439+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
440+
with:
441+
persist-credentials: false
435442
- name: Action-Test
436443
uses: ./
437444
with:
@@ -456,8 +463,9 @@ jobs:
456463
steps:
457464
# Need to check out as part of the test, as its a local action
458465
- name: Checkout repo
459-
uses: actions/checkout@v6
460-
466+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
467+
with:
468+
persist-credentials: false
461469
- name: Action-Test
462470
uses: ./
463471
with:
@@ -482,8 +490,9 @@ jobs:
482490
steps:
483491
# Need to check out as part of the test, as its a local action
484492
- name: Checkout repo
485-
uses: actions/checkout@v6
486-
493+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
494+
with:
495+
persist-credentials: false
487496
- name: Action-Test
488497
uses: ./
489498
with:
@@ -517,8 +526,9 @@ jobs:
517526
steps:
518527
# Need to check out as part of the test, as its a local action
519528
- name: Checkout repo
520-
uses: actions/checkout@v6
521-
529+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
530+
with:
531+
persist-credentials: false
522532
- name: Action-Test
523533
uses: ./
524534
with:
@@ -553,11 +563,12 @@ jobs:
553563
steps:
554564
# Need to check out as part of the test, as its a local action
555565
- name: Checkout repo
556-
uses: actions/checkout@v6
557-
566+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
567+
with:
568+
persist-credentials: false
558569
# Login to Azure to enable KeyVault access
559570
- name: Login to Azure
560-
uses: azure/login@v2
571+
uses: azure/login@1384c340ab2dda50fed2bee3041d1d87018aa5e8 # v2
561572
with:
562573
client-id: ${{ vars.AZURE_CLIENT_ID }}
563574
tenant-id: ${{ vars.AZURE_TENANT_ID }}
@@ -602,11 +613,12 @@ jobs:
602613
steps:
603614
# Need to check out as part of the test, as its a local action
604615
- name: Checkout repo
605-
uses: actions/checkout@v6
606-
616+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
617+
with:
618+
persist-credentials: false
607619
# Login to Azure to enable KeyVault access
608620
- name: Login to Azure
609-
uses: azure/login@v2
621+
uses: azure/login@1384c340ab2dda50fed2bee3041d1d87018aa5e8 # v2
610622
with:
611623
client-id: ${{ vars.AZURE_CLIENT_ID }}
612624
tenant-id: ${{ vars.AZURE_TENANT_ID }}
@@ -650,8 +662,9 @@ jobs:
650662
steps:
651663
# Need to check out as part of the test, as its a local action
652664
- name: Checkout repo
653-
uses: actions/checkout@v6
654-
665+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
666+
with:
667+
persist-credentials: false
655668
- name: Action-Test with PreserveCredentials false
656669
uses: ./
657670
with:

0 commit comments

Comments
 (0)