github-featured / composiohq--composio

发布

0 发布 1,233 Git 标签

RSS 订阅源
  • @composio/cli@0.2.31-beta.258 e49bd895fd
    比较

    ci: pin all GitHub Actions to commit SHAs

    frostbyte_neo 发布于 2026-06-09 08:42:27 +00:00

    The org now enforces a policy requiring every GitHub Action to be pinned
    to a full-length commit SHA; tag refs (@v6, @v2, …) are rejected at action
    resolution time. This broke all binary builds and release workflows
    (build-cli-binaries.yml failed at "Resolve Release Metadata":
    "actions/checkout@v6 is not allowed … must be pinned to a full-length
    commit SHA").

    Pin every third-party action across all workflows and composite actions to
    its commit SHA, with a trailing # <tag> comment for readability. Local
    actions (./.github/actions/*) and reusable workflows are unaffected.

    Co-Authored-By: Claude Opus 4.8 (1M context) noreply@anthropic.com

    下载附件