Skip to content

Pin action refs to latest trusted by TSCCR#154

Closed
hashicorp-tsccr[bot] wants to merge 1 commit intomainfrom
tsccr-auto-pinning/trusted/2025-05-01
Closed

Pin action refs to latest trusted by TSCCR#154
hashicorp-tsccr[bot] wants to merge 1 commit intomainfrom
tsccr-auto-pinning/trusted/2025-05-01

Conversation

@hashicorp-tsccr
Copy link
Copy Markdown
Contributor

Bumping GitHub Actions version to latest TSCCR release.

  • changes in .github/workflows/go-tests.yml
    • bump actions/setup-go from v3.5.0 to v5.4.0 (release notes)
    • bump actions/checkout from v3.3.0 to v4.2.2 (release notes)
    • bump actions/cache from v4.2.0 to v4.2.3 (release notes)
    • bump golangci/golangci-lint-action from 08e2f20817b15149a52b5b3ebe7de50aff2ba8c5 to v7.0.0 (release notes)
    • bump actions/upload-artifact from 65462800fd760344b1a7b4382951275a0abb4808 to v4.6.2 (release notes)
    • bump actions/upload-artifact from 65462800fd760344b1a7b4382951275a0abb4808 to v4.6.2 (release notes)

This PR was auto-generated by security-tsccr/actions/runs/14770748471

You can alter the configuration of this automation via the hcl config in security-tsccr/automation

This PR can be regenerated by dispatching the GitHub workflow Pin Action Refs. Please reach out to #team-prodsec if you have any questions.

@hashicorp-tsccr hashicorp-tsccr Bot requested a review from a team as a code owner May 1, 2025 06:06
@hashicorp-tsccr hashicorp-tsccr Bot added automated Auto-pinning dependencies Auto-pinning SEC-090 Auto-pinning labels May 1, 2025
@abhijeetviswa
Copy link
Copy Markdown

Superseded by #156, #157.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Auto-pinning dependencies Auto-pinning SEC-090 Auto-pinning

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant