Skip to content

Commit

Permalink
Merge pull request #40 from stacklok/on-behalf
Browse files Browse the repository at this point in the history
Change PR body
  • Loading branch information
jhrozek authored Jun 20, 2024
2 parents e08dfa7 + fc92290 commit a0f3391
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion pkg/action/action.go
Original file line number Diff line number Diff line change
Expand Up @@ -257,14 +257,15 @@ func (fa *FrizbeeAction) createPR(ctx context.Context) error {
defaultBranch := repository.GetDefaultBranch()

fa.bodyBuilder = &strings.Builder{}
fa.bodyBuilder.WriteString("## Frizbee: Pin images and actions to commit hash\n\n")
fa.bodyBuilder.WriteString("The following PR pins images and actions to their commit hash.\n\n")
fa.bodyBuilder.WriteString("Pinning images and actions to their commit hash ensures that the same " +
"version of the image or action is used every time the workflow runs. This is important for " +
"reproducibility and security.\n\n")
//nolint:lll
fa.bodyBuilder.WriteString("Pinning is a [security practice recommended by GitHub](https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions).\n\n")
//nolint:lll
fa.bodyBuilder.WriteString("> 🌟 If you like this action, why not try out [Minder](https://github.com/stacklok/minder), the secure supply chain platform. It has vastly more protections and is also free (as in :beer:) to opensource projects.")
fa.bodyBuilder.WriteString("🥏 Posted on behalf of [frizbee-action](https://github.com/stacklok/frizbee-action) 🥏, by [Stacklok](https://stacklok.com).\n\n")

// Create a new PR
pr, _, err := fa.Client.PullRequests.Create(ctx, fa.RepoOwner, fa.RepoName, &github.NewPullRequest{
Expand Down

0 comments on commit a0f3391

Please sign in to comment.