Skip to content

ci: pin GoReleaser action#5

Merged
hmmhmmhm merged 3 commits into
mainfrom
fix/pin-goreleaser-action
Jul 19, 2026
Merged

ci: pin GoReleaser action#5
hmmhmmhm merged 3 commits into
mainfrom
fix/pin-goreleaser-action

Conversation

@hmmhmmhm

Copy link
Copy Markdown
Owner

Summary

  • pin the third-party GoReleaser Action to the full SHA currently selected by v7
  • retain the v7 comment for readability and Dependabot updates
  • document and verify closure criteria for CodeQL alert 1

Verification

  • Ruby workflow YAML parse
  • full-SHA and upstream-ref assertions
  • git diff --check
  • go test ./...
  • go vet ./...

@hmmhmmhm
hmmhmmhm marked this pull request as ready for review July 19, 2026 22:47
@hmmhmmhm
hmmhmmhm merged commit 1f083bd into main Jul 19, 2026
8 checks passed
@hmmhmmhm
hmmhmmhm deleted the fix/pin-goreleaser-action branch July 19, 2026 22:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant