Fix issues with where Go is fetched from GitHub #728
code-scanning.yml
on: pull_request
Dependency Review
19s
CodeQL
1m 53s
GHA Workflow Security
20s
Annotations
10 errors
|
GHA Workflow Security
At least one workflow contains an unpinned GitHub Action version.
|
|
GHA Workflow Security
terraform-linters/setup-tflint@v6.2.1 is not pinned to a full length commit SHA.
|
|
GHA Workflow Security
actions/setup-go@v6.2.0 is not pinned to a full length commit SHA.
|
|
GHA Workflow Security
actions/setup-go@v6.2.0 is not pinned to a full length commit SHA.
|
|
GHA Workflow Security
actions/setup-go@v6.2.0 is not pinned to a full length commit SHA.
|
|
GHA Workflow Security
actions/setup-go@v6.2.0 is not pinned to a full length commit SHA.
|
|
GHA Workflow Security
actions/setup-go@v6.2.0 is not pinned to a full length commit SHA.
|
|
GHA Workflow Security
step-security/harden-runner@v2.14.2 is not pinned to a full length commit SHA.
|
|
GHA Workflow Security
step-security/harden-runner@2.14.2 is not pinned to a full length commit SHA.
|
|
GHA Workflow Security
step-security/harden-runner@v2.14.2 is not pinned to a full length commit SHA.
|