chore(deps): update github/codeql-action digest to fe23b5a #136
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: Lint (Github Actions workflows) | |
| on: # yamllint disable-line rule:truthy | |
| pull_request: | |
| types: [opened, synchronize] | |
| paths: [.github/workflows/**] | |
| jobs: | |
| # CI harden security tries to keep your github actions secure by following these simple rules: | |
| # - Check if no issues are found on your Github Action | |
| # - Ensure that all action and reusable workflow are pinned using directly a commit SHA | |
| ci_harden_security: | |
| name: Github Action security hardening | |
| runs-on: ubuntu-latest | |
| permissions: | |
| security-events: write | |
| steps: | |
| - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
| - name: Lint your Github Actions | |
| run: | | |
| curl -O https://raw.githubusercontent.com/rhysd/actionlint/main/.github/actionlint-matcher.json | |
| echo "::add-matcher::.github/actionlint-matcher.json" | |
| bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash) | |
| ./actionlint -color | |
| - name: Ensure SHA pinned actions | |
| uses: zgosalvez/github-actions-ensure-sha-pinned-actions@f32435541e24cd6a4700a7f52bb2ec59e80603b1 # v2.1.4 |