chore: pin external GitHub Actions to commit SHAs#6
chore: pin external GitHub Actions to commit SHAs#6joel-phantom wants to merge 2 commits intomainfrom
Conversation
Pin all unpinned external GitHub Action `uses:` references to their current full 40-character commit SHAs, with original ref in a comment. This is part of the org-wide supply chain security hardening effort. Refs: SEC-7928, SEC-6683
|
Warning Rate limit exceeded
Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 2 minutes and 33 seconds. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (5)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
Pin sub-path action references (owner/repo/path@ref) that were missed in the initial pass. Refs: SEC-7928, SEC-6683
joel-phantom
deleted the
autopilot/sec-7928-patch-remaining-repos-with-unpinned-github-actions-from-sec
branch
1 participant
Summary
uses:references to full 40-character commit SHAsMotivation
Supply chain security hardening: pinning actions to immutable commit SHAs prevents silent changes from compromised or force-pushed tags.
Part of the org-wide audit tracked in SEC-6683 and SEC-7928.
Test plan
🤖 Generated with Claude Code