Github Actions Commit Hashes

[stephenfuqua]

Jira Description

[https://github.com/Ed-Fi-Exchange-OSS/Leadership-Profile/blob/main/.github/workflows/publish.yml]

 

*Note from Stephen Fuqua: 

Change the actions to use commit hashes instead of version tags? Since these actions are formally from GitHub they are relatively safe, unlike third party actions.  However, we want to use commit hashes on a consistent basis for best security.

Jira Metadata

Key: LP-39
Epic: n/a
Created: 2021-02-04T10:42:09.000-0600
Reporter: Yogiraj Aradhye

[stephenfuqua]

Jira Comment

[~douglasloyo] and [~User16360602429401097730]  Headspring created this but I'm not sure if there is any work pending. Feel free to close it if nothing else needs to be done. We will be using the same repo, ping me if you need anything from me.

 

Jira Metadata

Created: 2022-05-12T16:44:25.320-0500
Commenter: Itzel Torres [Contractor] [X]