René's URL Explorer Experiment


Title: Pin GitHub Actions workflow step hashes and use minimum permission by zimeg · Pull Request #1474 · slackapi/java-slack-sdk · GitHub

Open Graph Title: Pin GitHub Actions workflow step hashes and use minimum permission by zimeg · Pull Request #1474 · slackapi/java-slack-sdk

X Title: Pin GitHub Actions workflow step hashes and use minimum permission by zimeg · Pull Request #1474 · slackapi/java-slack-sdk

Description: Slack Developer Kit (including Bolt for Java) for any JVM language - Pin GitHub Actions workflow step hashes and use minimum permission by zimeg · Pull Request #1474 · slackapi/java-slack-sdk

Open Graph Description: Summary This PR uses the wonderful zizmor tool to audit our own workflows and pinact for pinned versioning 👾 Category Other Reviewers A similar audit can be performed with the zizmor tool: $ ziz...

X Description: Summary This PR uses the wonderful zizmor tool to audit our own workflows and pinact for pinned versioning 👾 Category Other Reviewers A similar audit can be performed with the zizmor tool: $ ziz...

Opengraph URL: https://github.com/slackapi/java-slack-sdk/pull/1474

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:aa4937cb-065e-8ee9-b7ee-b732916da85d
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idCE2A:67A9E:118EEA8:17A37EA:6A4C7097
html-safe-nonce52cf2e426878e45cd7352e9951f7a40a228e3376d73a09cffe63da10ac78cdcc
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDRTJBOjY3QTlFOjExOEVFQTg6MTdBMzdFQTo2QTRDNzA5NyIsInZpc2l0b3JfaWQiOiIyOTU3NDgxNzI0MDkzNDI3ODYzIiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0=
visitor-hmac73d846422365342d072b37074cf13964c10b16f3f41a3b8ffc9129406872ef13
hovercard-subject-tagpull_request:2530028722
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/slackapi/java-slack-sdk/1474/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/e229c15d94fce4dd719250d267f41951323efd1df721b41fd00211a4be3c0e58/slackapi/java-slack-sdk/pull/1474
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/e229c15d94fce4dd719250d267f41951323efd1df721b41fd00211a4be3c0e58/slackapi/java-slack-sdk/pull/1474
og:image:altSummary This PR uses the wonderful zizmor tool to audit our own workflows and pinact for pinned versioning 👾 Category Other Reviewers A similar audit can be performed with the zizmor tool: $ ziz...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernamezimeg
hostnamegithub.com
expected-hostnamegithub.com
None3d11bb817438277de2a940854450e83a7d32b6aeb5014e9e6b00a6423900251c
turbo-cache-controlno-cache
go-importgithub.com/slackapi/java-slack-sdk git https://github.com/slackapi/java-slack-sdk.git
octolytics-dimension-user_id6962987
octolytics-dimension-user_loginslackapi
octolytics-dimension-repository_id62449869
octolytics-dimension-repository_nwoslackapi/java-slack-sdk
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id62449869
octolytics-dimension-repository_network_root_nwoslackapi/java-slack-sdk
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release14099438da5379150f15a2892474c7c7e6c0e55e
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/slackapi/java-slack-sdk/pull/1474#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fslackapi%2Fjava-slack-sdk%2Fpull%2F1474
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fslackapi%2Fjava-slack-sdk%2Fpull%2F1474
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=slackapi%2Fjava-slack-sdk
Reloadhttps://github.com/slackapi/java-slack-sdk/pull/1474
Reloadhttps://github.com/slackapi/java-slack-sdk/pull/1474
Reloadhttps://github.com/slackapi/java-slack-sdk/pull/1474
Please reload this pagehttps://github.com/slackapi/java-slack-sdk/pull/1474
slackapi https://github.com/slackapi
java-slack-sdkhttps://github.com/slackapi/java-slack-sdk
Notifications https://github.com/login?return_to=%2Fslackapi%2Fjava-slack-sdk
Fork 231 https://github.com/login?return_to=%2Fslackapi%2Fjava-slack-sdk
Star 601 https://github.com/login?return_to=%2Fslackapi%2Fjava-slack-sdk
Code https://github.com/slackapi/java-slack-sdk
Issues 32 https://github.com/slackapi/java-slack-sdk/issues
Pull requests 14 https://github.com/slackapi/java-slack-sdk/pulls
Actions https://github.com/slackapi/java-slack-sdk/actions
Security and quality 0 https://github.com/slackapi/java-slack-sdk/security
Insights https://github.com/slackapi/java-slack-sdk/pulse
Code https://github.com/slackapi/java-slack-sdk
Issues https://github.com/slackapi/java-slack-sdk/issues
Pull requests https://github.com/slackapi/java-slack-sdk/pulls
Actions https://github.com/slackapi/java-slack-sdk/actions
Security and quality https://github.com/slackapi/java-slack-sdk/security
Insights https://github.com/slackapi/java-slack-sdk/pulse
zimeghttps://github.com/zimeg
mainhttps://github.com/slackapi/java-slack-sdk/tree/main
ci-audithttps://github.com/slackapi/java-slack-sdk/tree/ci-audit
Conversationhttps://github.com/slackapi/java-slack-sdk/pull/1474
Commits4 (4)https://github.com/slackapi/java-slack-sdk/pull/1474/commits
Checkshttps://github.com/slackapi/java-slack-sdk/pull/1474/checks
Files changedhttps://github.com/slackapi/java-slack-sdk/pull/1474/files
Pin GitHub Actions workflow step hashes and use minimum permissionhttps://github.com/slackapi/java-slack-sdk/pull/1474#top
zimeghttps://github.com/zimeg
mainhttps://github.com/slackapi/java-slack-sdk/tree/main
ci-audithttps://github.com/slackapi/java-slack-sdk/tree/ci-audit
https://github.com/zimeg
zimeghttps://github.com/zimeg
May 20, 2025https://github.com/slackapi/java-slack-sdk/pull/1474#issue-3075297781
zizmorhttps://github.com/zizmorcore/zizmor
pinacthttps://github.com/suzuki-shunsuke/pinact
Contributing guidelineshttps://github.com/slackapi/java-slack-sdk/blob/main/.github/contributing.md
Code of Conducthttps://slackhq.github.io/code-of-conduct
Please reload this pagehttps://github.com/slackapi/java-slack-sdk/pull/1474
https://github.com/zimeg
Pin GitHub Actions workflow step hashes and use mimimum permissionhttps://github.com/slackapi/java-slack-sdk/pull/1474/commits/2b58145b4fd83dbb950063fda67f7f598ba5ef60
2b58145https://github.com/slackapi/java-slack-sdk/pull/1474/commits/2b58145b4fd83dbb950063fda67f7f598ba5ef60
https://github.com/zimeg
zimeghttps://github.com/zimeg
WilliamBergaminhttps://github.com/WilliamBergamin
hello-ashleyintechhttps://github.com/hello-ashleyintech
May 20, 2025 00:33https://github.com/slackapi/java-slack-sdk/pull/1474#event-17723848189
https://github.com/zimeg
zimeghttps://github.com/zimeg
May 20, 2025https://github.com/slackapi/java-slack-sdk/pull/1474#event-17723848212
https://github.com/zimeg
zimeghttps://github.com/zimeg
dependencies https://github.com/slackapi/java-slack-sdk/issues?q=state%3Aopen%20label%3Adependencies
github_actions https://github.com/slackapi/java-slack-sdk/issues?q=state%3Aopen%20label%3Agithub_actions
May 20, 2025https://github.com/slackapi/java-slack-sdk/pull/1474#event-17723848335
https://github.com/zimeg
docs: remove a space to confirm permissions of the docs workflow are …https://github.com/slackapi/java-slack-sdk/pull/1474/commits/e70c893aefeae6ac9c8d3c0b32f66b63aa8ac48a
e70c893https://github.com/slackapi/java-slack-sdk/pull/1474/commits/e70c893aefeae6ac9c8d3c0b32f66b63aa8ac48a
https://github.com/apps/codecov
codecovhttps://github.com/apps/codecov
May 20, 2025https://github.com/slackapi/java-slack-sdk/pull/1474#issuecomment-2892586961
Please reload this pagehttps://github.com/slackapi/java-slack-sdk/pull/1474
Codecovhttps://app.codecov.io/gh/slackapi/java-slack-sdk/pull/1474?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=slackapi
(2a6f7dd)https://app.codecov.io/gh/slackapi/java-slack-sdk/commit/2a6f7dd8c1be87512442737ad82d48ad02a10709?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=slackapi
(4c04a6b)https://app.codecov.io/gh/slackapi/java-slack-sdk/commit/4c04a6baba480218c25c2d0d60fe179e41c36a4e?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=slackapi
☔ View full report in Codecov by Sentryhttps://app.codecov.io/gh/slackapi/java-slack-sdk/pull/1474?dropdown=coverage&src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=slackapi
Share it herehttps://about.codecov.io/codecov-pr-comment-feedback/?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=slackapi
Test Analyticshttps://docs.codecov.com/docs/test-analytics
Please reload this pagehttps://github.com/slackapi/java-slack-sdk/pull/1474
https://github.com/zimeg
zimeghttps://github.com/zimeg
May 20, 2025 https://github.com/slackapi/java-slack-sdk/pull/1474#pullrequestreview-2852239908
View reviewed changes https://github.com/slackapi/java-slack-sdk/pull/1474/files/e70c893aefeae6ac9c8d3c0b32f66b63aa8ac48a
zimeghttps://github.com/zimeg
https://github.com/slackapi/java-slack-sdk/pull/1474#pullrequestreview-2852239908
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/slackapi/java-slack-sdk/pull/1474
.github/workflows/docs-deploy.yamlhttps://github.com/slackapi/java-slack-sdk/pull/1474/files/e70c893aefeae6ac9c8d3c0b32f66b63aa8ac48a#diff-c60abbc0f5cbeb895e12237cf346049cff69c54024b84e9214b014e999472e58
zimeghttps://github.com/zimeg
May 20, 2025https://github.com/slackapi/java-slack-sdk/pull/1474#discussion_r2096650958
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
https://github.com/slackapi/java-slack-sdk/actions/runs/15126115805?pr=1474https://github.com/slackapi/java-slack-sdk/actions/runs/15126115805?pr=1474
Please reload this pagehttps://github.com/slackapi/java-slack-sdk/pull/1474
WilliamBergaminhttps://github.com/WilliamBergamin
May 20, 2025https://github.com/slackapi/java-slack-sdk/pull/1474#discussion_r2098182178
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/slackapi/java-slack-sdk/pull/1474
.github/workflows/unit-tests-jdk-14.ymlhttps://github.com/slackapi/java-slack-sdk/pull/1474/files/e70c893aefeae6ac9c8d3c0b32f66b63aa8ac48a#diff-7534069dbb9f6a64dabe80247faff2ad38fe43c2c235ee72a01bb17655d3c97d
zimeghttps://github.com/zimeg
May 20, 2025https://github.com/slackapi/java-slack-sdk/pull/1474#discussion_r2096651869
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/slackapi/java-slack-sdk/pull/1474
zimeghttps://github.com/zimeg
May 19, 2025 17:42https://github.com/slackapi/java-slack-sdk/pull/1474#commits-pushed-387fb3c
https://github.com/zimeg
revert: space removal for a more focused set of changes in this pull …https://github.com/slackapi/java-slack-sdk/pull/1474/commits/387fb3ca37c967fef99869c019fff0f6ae769f27
387fb3chttps://github.com/slackapi/java-slack-sdk/pull/1474/commits/387fb3ca37c967fef99869c019fff0f6ae769f27
e70c893https://github.com/slackapi/java-slack-sdk/commit/e70c893aefeae6ac9c8d3c0b32f66b63aa8ac48a
https://github.com/zimeg
ci: move actions permissions into the job for fine grained detailshttps://github.com/slackapi/java-slack-sdk/pull/1474/commits/4c04a6baba480218c25c2d0d60fe179e41c36a4e
4c04a6bhttps://github.com/slackapi/java-slack-sdk/pull/1474/commits/4c04a6baba480218c25c2d0d60fe179e41c36a4e
https://github.com/WilliamBergamin
WilliamBergaminhttps://github.com/WilliamBergamin
May 20, 2025 https://github.com/slackapi/java-slack-sdk/pull/1474#pullrequestreview-2854529680
View reviewed changes https://github.com/slackapi/java-slack-sdk/pull/1474/files/4c04a6baba480218c25c2d0d60fe179e41c36a4e
WilliamBergaminhttps://github.com/WilliamBergamin
https://github.com/slackapi/java-slack-sdk/pull/1474#pullrequestreview-2854529680
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/slackapi/java-slack-sdk/pull/1474
.github/workflows/docs-deploy.yamlhttps://github.com/slackapi/java-slack-sdk/pull/1474/files/e70c893aefeae6ac9c8d3c0b32f66b63aa8ac48a#diff-c60abbc0f5cbeb895e12237cf346049cff69c54024b84e9214b014e999472e58
WilliamBergaminhttps://github.com/WilliamBergamin
May 20, 2025https://github.com/slackapi/java-slack-sdk/pull/1474#discussion_r2098182178
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/slackapi/java-slack-sdk/pull/1474
https://github.com/zimeg
zimeghttps://github.com/zimeg
May 21, 2025https://github.com/slackapi/java-slack-sdk/pull/1474#issuecomment-2896142914
@WilliamBergaminhttps://github.com/WilliamBergamin
Please reload this pagehttps://github.com/slackapi/java-slack-sdk/pull/1474
https://github.com/zimeg
zimeghttps://github.com/zimeg
2c70c83https://github.com/slackapi/java-slack-sdk/commit/2c70c8369bba118e45c0adda69fa7a7b422cbe68
May 21, 2025https://github.com/slackapi/java-slack-sdk/pull/1474#event-17743569432
https://github.com/WilliamBergamin
WilliamBergaminhttps://github.com/WilliamBergamin
May 21, 2025 14:11https://github.com/slackapi/java-slack-sdk/pull/1474#event-17754749284
https://github.co/hiddenchars
https://github.com/slackapi/java-slack-sdk/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fslackapi%2Fjava-slack-sdk%2Fpull%2F1474
https://github.com/WilliamBergamin
WilliamBergamin https://github.com/WilliamBergamin
https://github.com/slackapi/java-slack-sdk/pull/1474/files/4c04a6baba480218c25c2d0d60fe179e41c36a4e
https://github.com/hello-ashleyintech
hello-ashleyintech https://github.com/hello-ashleyintech
https://github.com/zimeg
zimeg https://github.com/zimeg
dependencies https://github.com/slackapi/java-slack-sdk/issues?q=state%3Aopen%20label%3Adependencies
github_actions https://github.com/slackapi/java-slack-sdk/issues?q=state%3Aopen%20label%3Agithub_actions
Please reload this pagehttps://github.com/slackapi/java-slack-sdk/pull/1474
https://github.com/zimeg
https://github.com/WilliamBergamin
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.