update GA #24
cornelcroiAnnotations
3 errors and 2 warnings
|
Harden Security
actions/checkout@v3 is not pinned to a full length commit SHA.
|
|
Harden Security
actions/setup-python@v4 is not pinned to a full length commit SHA.
|
|
Harden Security
At least one workflow contains an unpinned GitHub Action version.
|
|
Harden Security
The following actions use a deprecated Node.js version and will be forced to run on node20: zgosalvez/github-actions-ensure-sha-pinned-actions@f32435541e24cd6a4700a7f52bb2ec59e80603b1. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
Harden Security
The "security-checks" job of the "on-push.yml" workflow does not contain uses or steps.
|