Skip to content

fix(cd): pinning action version for security#17075

Merged
ChronosSF merged 10 commits intomasterfrom
sstoychev/pinning-repo-dispatch
Mar 27, 2026
Merged

fix(cd): pinning action version for security#17075
ChronosSF merged 10 commits intomasterfrom
sstoychev/pinning-repo-dispatch

Conversation

@ChronosSF
Copy link
Copy Markdown
Member

@ChronosSF ChronosSF commented Mar 23, 2026

Closes #

Additional information (check all that apply):

  • Bug fix
  • New functionality
  • Documentation
  • Demos
  • CI/CD

Checklist:

  • All relevant tags have been applied to this PR
  • This PR includes unit tests covering all the new code (test guidelines)
  • This PR includes API docs for newly added methods/properties (api docs guidelines)
  • This PR includes feature/README.MD updates for the feature docs
  • This PR includes general feature table updates in the root README.MD
  • This PR includes CHANGELOG.MD updates for newly added functionality
  • This PR contains breaking changes
  • This PR includes ng update migrations for the breaking changes (migrations guidelines)
  • This PR includes behavioral changes and the feature specification has been updated with them

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Pins a GitHub Action reference in the licensed release trigger workflow to a commit SHA to reduce supply-chain risk in CI/CD.

Changes:

  • Replaces peter-evans/repository-dispatch@v3 with a specific commit SHA in the licensed release dispatch workflow.

Comment thread .github/workflows/trigger-licensed-release.yml Outdated
@ChronosSF ChronosSF requested a review from dobromirts March 24, 2026 15:20
@dafo dafo self-requested a review March 24, 2026 16:01
dafo
dafo previously approved these changes Mar 24, 2026
Comment thread .github/workflows/trigger-licensed-release.yml
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

kdinev and others added 2 commits March 27, 2026 12:24
Comment thread .github/workflows/trigger-licensed-release.yml Fixed
@ChronosSF ChronosSF requested a review from kdinev March 27, 2026 10:52
@ChronosSF ChronosSF merged commit fbea76b into master Mar 27, 2026
6 checks passed
@ChronosSF ChronosSF deleted the sstoychev/pinning-repo-dispatch branch March 27, 2026 11:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants