Skip to content

ci: hardening security of Github actions#69

Merged
mato533 merged 5 commits intomainfrom
ta/ci/security
Jun 22, 2025
Merged

ci: hardening security of Github actions#69
mato533 merged 5 commits intomainfrom
ta/ci/security

Conversation

@mato533
Copy link
Copy Markdown
Member

@mato533 mato533 commented Jun 22, 2025

Proposed changes

This pull request enhances the security of our GitHub Actions workflows by implementing several best practices:

  • Pinning Actions to Commit SHAs: All external GitHub Actions are now pinned to specific commit SHAs instead of floating versions (e.g., @v4). This prevents unexpected or malicious code from being executed if a version tag is updated.
  • Updated Actions: All actions have been updated to their latest stable versions to include the latest features and security fixes.
  • Workflow Cleanup: Minor linter issues have been resolved.

Types of changes

  • Polish (an improvement for an existing feature)
  • Bugfix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation update (improvements to the project's docs)
  • Internal updates (everything related to internal scripts, governance documentation and CI files)

Checklist

  • I have read the CONTRIBUTING doc
  • I have added tests that prove my fix is effective or that my feature works
  • I have added the necessary documentation (if appropriate)
  • I have added proper type definitions for new commands (if appropriate)

Further comments

Reviewers: @webdriverio/project-committers

@github-actions github-actions Bot added the PR: Internal 🏠 PRs that contain changes internals label Jun 22, 2025
@mato533 mato533 force-pushed the ta/ci/security branch 3 times, most recently from 86ee3cc to 1cd8720 Compare June 22, 2025 15:24
@mato533 mato533 marked this pull request as ready for review June 22, 2025 15:25
@mato533 mato533 merged commit cf4115b into main Jun 22, 2025
3 checks passed
@mato533 mato533 deleted the ta/ci/security branch June 22, 2025 15:39
@christian-bromann
Copy link
Copy Markdown
Member

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

PR: Internal 🏠 PRs that contain changes internals

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants