Skip to content

Commit 5acfbb9

Browse files
LI-197586 Pin coveralls-python-action to release SHA (#68)
Replace the mutable @develop reference in ci.yml with the immutable commit SHA of release v20201129, closing the supply-chain risk of running whatever sits on the third-party action's develop branch (CWE-829). Co-authored-by: brsouzapaypal <336266991+brsouzapaypal@users.noreply.github.com>
1 parent 5b954dd commit 5acfbb9

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎.github/workflows/ci.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -98,4 +98,4 @@ jobs:
9898
- name: Coverage
9999
run: make coverage
100100

101-
- uses: AndreMiras/coveralls-python-action@develop
101+
- uses: AndreMiras/coveralls-python-action@f5fd5c309b39d01599fb92c72d4f7409ea78aec9 # v20201129

0 commit comments

Comments
 (0)