[DynInst_API:] [dyninst/dyninst] b986c3: Pin GitHub action dependencies by hash (#2078)


Date: Tue, 16 Dec 2025 16:10:12 -0800
From: William Allen <noreply@xxxxxxxxxx>
Subject: [DynInst_API:] [dyninst/dyninst] b986c3: Pin GitHub action dependencies by hash (#2078)
  Branch: refs/heads/master
  Home:   https://github.com/dyninst/dyninst
  Commit: b986c3823660cd9f5a2bac39fc41360e44dd8ef1
      https://github.com/dyninst/dyninst/commit/b986c3823660cd9f5a2bac39fc41360e44dd8ef1
  Author: William Allen <16820599+williamjallen@xxxxxxxxxxxxxxxxxxxxxxxx>
  Date:   2025-12-16 (Tue, 16 Dec 2025)

  Changed paths:
    M .github/workflows/binary-tests.yaml
    M .github/workflows/build-opts.yaml
    M .github/workflows/cmake-formatting.yaml
    M .github/workflows/codegen-cross-build.yaml
    M .github/workflows/compiler-multibuild.yaml
    M .github/workflows/consumers.yaml
    M .github/workflows/dependency-version.yaml
    M .github/workflows/dev-containers.yaml
    M .github/workflows/libabigail.yaml
    M .github/workflows/pr-tests.yaml
    M .github/workflows/purge-workflows.yaml
    M .github/workflows/refresh-containers.yaml
    M .github/workflows/release-containers.yaml
    M .github/workflows/spack-build.yaml
    M .github/workflows/system-libs.yaml

  Log Message:
  -----------
  Pin GitHub action dependencies by hash (#2078)

Hash-pinned dependencies are an important requirement enforced by the OpenSSF scorecard tool: https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies

This commit pins all GitHub Actions workflows to a commit hash.



To unsubscribe from these emails, change your notification settings at https://github.com/dyninst/dyninst/settings/notifications
[← Prev in Thread] Current Thread [Next in Thread→]
  • [DynInst_API:] [dyninst/dyninst] b986c3: Pin GitHub action dependencies by hash (#2078), William Allen <=