Title: gh-109110: Hash-pin GitHub Actions by pnacht · Pull Request #109111 · python/cpython · GitHub
Open Graph Title: gh-109110: Hash-pin GitHub Actions by pnacht · Pull Request #109111 · python/cpython
X Title: gh-109110: Hash-pin GitHub Actions by pnacht · Pull Request #109111 · python/cpython
Description: Fixes #109110. This PR hash-pins all GitHub Actions and configures dependabot to keep them up-to-date with a single monthly PR. This will increase the resiliency of the repo's workflows in the face of broken or malicious versions of any Actions. I don't believe this change requires a NEWS entry, but let me know and I'll add one. Issue: gh-109110
Open Graph Description: Fixes #109110. This PR hash-pins all GitHub Actions and configures dependabot to keep them up-to-date with a single monthly PR. This will increase the resiliency of the repo's workflows in the ...
X Description: Fixes #109110. This PR hash-pins all GitHub Actions and configures dependabot to keep them up-to-date with a single monthly PR. This will increase the resiliency of the repo's workflows in ...
Opengraph URL: https://github.com/python/cpython/pull/109111
X: @github
Domain: github.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:b8684dd6-bf09-e206-dbdf-92b4747f5c1e |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | C1AC:2B1AB1:C2436A:FE64E9:696AFE58 |
| html-safe-nonce | 3ab0747896137926e2024d562708dd0d8ff1577a12b81b5ba7c3741286462e2b |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDMUFDOjJCMUFCMTpDMjQzNkE6RkU2NEU5OjY5NkFGRTU4IiwidmlzaXRvcl9pZCI6IjI5MDA5NzAzMjI1MTQzNDU1NjAiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 9c3780839140701e9faa84cf391ca8a7fc8d6f00adf4687f189504037e26c803 |
| hovercard-subject-tag | pull_request:1506858546 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/python/cpython/pull/109111/files |
| twitter:image | https://avatars.githubusercontent.com/u/15221358?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/u/15221358?s=400&v=4 |
| og:image:alt | Fixes #109110. This PR hash-pins all GitHub Actions and configures dependabot to keep them up-to-date with a single monthly PR. This will increase the resiliency of the repo's workflows in the ... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 5f99f7c1d70f01da5b93e5ca90303359738944d8ab470e396496262c66e60b8d |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/python/cpython git https://github.com/python/cpython.git |
| octolytics-dimension-user_id | 1525981 |
| octolytics-dimension-user_login | python |
| octolytics-dimension-repository_id | 81598961 |
| octolytics-dimension-repository_nwo | python/cpython |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 81598961 |
| octolytics-dimension-repository_network_root_nwo | python/cpython |
| turbo-body-classes | logged-out env-production page-responsive full-width |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 82560a55c6b2054555076f46e683151ee28a19bc |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width