Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CI] Update actions to use immutable release and non deprecated version of Node #926

Merged
merged 7 commits into from
Mar 4, 2024

Conversation

Ana06
Copy link
Member

@Ana06 Ana06 commented Feb 28, 2024

Update actions to use an immutable release by using a full length commit SHA to mitigate security risk: https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions

Update actions to its latest version. Some of them where using a deprecated version of Node: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20 Now all use Node 20 with the exception of actions-ecosystem/action-remove-labels, which is using the old Note 12 and is being forced by GH to run in th deprecated Node 16: https://github.blog/changelog/2022-09-22-github-actions-all-actions-will-begin-running-on-node16-instead-of-node12 It should be updated to Node 20 (actions-ecosystem/action-remove-labels#413 (comment)), but it seems to still work fine.

Update the action to the latest version as v3 uses a deprecated version
of Node. Use an immutable release by using the commit hash.
Update the action to the latest version as the old version was using a
deprecated version of Node. Use an immutable release by using the commit
hash.
Update the action to the latest version as v3 uses a deprecated version
of Node. Use an immutable release by using the commit hash.
Use an immutable release by using the commit hash. Note this is an old
version using a deprecated version of Node (forced by GH to run in a
newer version), but it seems to still work fine.
Update the action to the latest version as the old version was using a
deprecated version of Node. Use an immutable release by using the commit
hash.
Update the action to the latest version as the old version was using a
deprecated version of Node. Use an immutable release by using the commit
hash.
Use an immutable release by using the commit hash.
@Ana06 Ana06 added the 🏃 CI Related to CI label Feb 28, 2024
@Ana06 Ana06 self-assigned this Feb 28, 2024
@Ana06 Ana06 requested a review from mr-tz March 4, 2024 11:54
@Ana06 Ana06 merged commit 0074657 into mandiant:main Mar 4, 2024
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🏃 CI Related to CI
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant