Skip to content

fix(security): [Aikido] [] AI Fix for 3rd party Github Actions should be pinned - #7

Open
aikido-autofix[bot] wants to merge 1 commit into
masterfrom
fix/aikido-security-sast-52483965-d2jp
Open

fix(security): [Aikido] [] AI Fix for 3rd party Github Actions should be pinned#7
aikido-autofix[bot] wants to merge 1 commit into
masterfrom
fix/aikido-security-sast-52483965-d2jp

Conversation

@aikido-autofix

Copy link
Copy Markdown

This patch mitigates a potential supply chain attack by pinning the version of third-party Github Actions to their commit SHA.

Aikido used AI to generate this PR.

High confidence: Aikido has a robust set of benchmarks for similar fixes, and they are proven to be effective.

@ChristianWitts ChristianWitts left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving Aikido security autofix — CI is green. Owning team: please give this a final review and merge.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant