Skip to content

chore: pin actions/checkout to v4.3.0 SHA - #47

Open
decentraland-bot wants to merge 1 commit into
masterfrom
security/pin-checkout-sha
Open

chore: pin actions/checkout to v4.3.0 SHA#47
decentraland-bot wants to merge 1 commit into
masterfrom
security/pin-checkout-sha

Conversation

@decentraland-bot

Copy link
Copy Markdown
Contributor

Summary

  • Pins actions/checkout@master to the specific commit SHA for v4.3.0 (08eba0b27e820071cde6df949e0beb9ba4906955)
  • This prevents supply chain attacks via mutable branch references

Security

Using commit SHA pinning ensures workflow integrity by referencing an immutable commit rather than a mutable branch tag.

@decentraland-bot decentraland-bot changed the title ci: pin actions/checkout to v4.3.0 SHA chore: pin actions/checkout to v4.3.0 SHA May 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant