mirror of
https://github.com/temporalio/temporal.git
synced 2026-08-31 02:51:51 -07:00
122ed53e01
> 🏕️ This pull request was created by [camper](https://github.com/temporalio/camper), an automated security campaign tool. ## Finding <table> <tr><td><strong>Rule</strong></td><td><code>unpinned-github-actions</code></td></tr> <tr><td><strong>Severity</strong></td><td>HIGH</td></tr> <tr><td><strong>Repository</strong></td><td><code>temporalio/temporal</code></td></tr> <tr><td><strong>Ticket</strong></td><td><a href="https://temporalio.atlassian.net/browse/VLN-1353">VLN-1353</a></td></tr> </table> ## Summary 🤠 [Deputy](https://github.com/temporalio/deputy) pinned dependencies to immutable references. - Total refs: 78 - Pinned refs: 71 - Skipped refs: 7 Changed references: - `actions/checkout`: `v6` -> `df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3` - `actions/setup-go`: `v6` -> `4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0` - `goreleaser/goreleaser-action`: `v6` -> `e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0` - `docker/setup-qemu-action`: `v3` -> `c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0` - `docker/setup-buildx-action`: `v3` -> `8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0` - `docker/login-action`: `v3` -> `c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0` - `actions/github-script`: `v9` -> `3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0` - `actions/checkout`: `v6` -> `df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3` - `actions/setup-go`: `v6` -> `4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0` - `actions/create-github-app-token`: `v2` -> `fee1f7d63c2ff003460e3d139729b119787bc349 # v2.2.2` - +61 more ## Instructions - **Approve** to merge this fix - **Request changes** to trigger a new remediation attempt - `/camper rebase` — rebase onto the base branch - `/camper close` — close this PR without merging - `/camper retry` — close and retry with a new fix Co-authored-by: picatz <14850816+picatz@users.noreply.github.com>