github-featured / learningcircuit--local-deep-research

发布

0 发布 174 Git 标签

RSS 订阅源
  • v1.3.12 ad95152257
    比较

    Pin third-party GitHub Actions to SHA and improve Dockerfile security (#1359)

    frostbyte_neo 发布于 2025-12-14 16:47:12 +00:00

    • Pin anchore/sbom-action to SHA (v0.20.11)
    • Pin EnricoMi/publish-unit-test-result-action to SHA (v2.21.0)
    • Pin zaproxy actions (action-baseline, action-full-scan, action-api-scan) to SHA
    • Replace Dockerfile curl|bash NodeSource script with explicit GPG-verified apt repo

    Addresses OSSF Scorecard Pinned-Dependencies warnings for high-value items.

    下载附件