Skip to content

Commit 02eaabc

Browse files
committed
fix(ci): pin vmactions/freebsd-vm to SHA for security audit
Security audit (scripts/security-audit.sh Layer 1) blocks unpinned GitHub Actions. Pin vmactions/freebsd-vm@v1 to its release commit SHA. Ref: scripts/security-audit.sh BLOCKED check Signed-off-by: Pedro Ramos <131530838+pr9000@users.noreply.github.com>
1 parent 3eba121 commit 02eaabc

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎.github/workflows/_build.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -367,7 +367,7 @@ jobs:
367367

368368
- name: Build FreeBSD ${{ matrix.release }} (${{ matrix.arch }}) binaries inside VM
369369
# https://github.com/vmactions/freebsd-vm
370-
uses: vmactions/freebsd-vm@v1
370+
uses: vmactions/freebsd-vm@83b151f58c6047089f4c80eb5ba2039d158ce093 # v1
371371
with:
372372
release: ${{ matrix.release }}
373373
arch: ${{ matrix.arch }}

0 commit comments

Comments
 (0)