Skip to content

fix(cd): pinning action version for security #17075

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ChronosSF merged 10 commits into from
Mar 27, 2026
Merged

fix(cd): pinning action version for security #17075

Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
6246b0f
fix(cd): pinning action version for security
ChronosSF Mar 23, 2026
765b8e1
fix(cd): removing left-over permission
ChronosSF Mar 24, 2026
4c1b03f
Merge branch 'master' into sstoychev/pinning-repo-dispatch
ChronosSF Mar 24, 2026
3313a28
fix(cd): pinning both repo dispatch cases
ChronosSF Mar 24, 2026
2362509
Merge remote-tracking branch 'origin/master' into sstoychev/pinning-r…
ChronosSF Mar 24, 2026
8c4406c
Merge branch 'master' into sstoychev/pinning-repo-dispatch
kdinev Mar 27, 2026
630f227
Merge branch 'master' into sstoychev/pinning-repo-dispatch
kdinev Mar 27, 2026
c9de846
Apply suggestion from @kdinev
ChronosSF Mar 27, 2026
edc59f7
Merge branch 'master' into sstoychev/pinning-repo-dispatch
kdinev Mar 27, 2026
b0314dd
chore(ci): reverting to SHA pinning for both dispatch actions
ChronosSF Mar 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 1 addition & 2 deletions .github/workflows/trigger-licensed-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,6 @@
name: Trigger Licensed Release

permissions:
id-token: write
contents: read

on:
Expand Down Expand Up @@ -40,7 +39,7 @@ jobs:
}

- name: Send repository dispatch to private repo for extras
uses: peter-evans/repository-dispatch@v3
uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # equivalent to release v4.0.1
with:
token: ${{ steps.app-token.outputs.token }}
repository: IgniteUI/igniteui-actions
Expand Down
Loading