Skip to content

chore: upgrade scorecard workflow pinned action versions #354

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

chore: upgrade scorecard workflow pinned action versions #354

wants to merge 1 commit into from

Conversation

carpasse
Copy link
Contributor

Upgrade scorecard workflow pinned action versions to latest versions.

Issue expressjs/security-wg#2

@carpasse carpasse mentioned this pull request Dec 23, 2024
Closed
3 tasks
@blakeembrey
Copy link
Member

Can we move these into another repo instead? expressjs/security-wg#31

Why are we upgrading? What’s changed? This doesn’t fix that scorecard workflows turn themselves off when the repo isn’t popular right?

@wesleytodd
Copy link
Member

I agree with @blakeembrey. I dont see a reason to close this until we get together a plan that doesn't involve so much distribute work. Centralizing it seems like a great way, and I think this is part of the next round of already planned work right?

@UlisesGascon
Copy link
Member

So far seems like centralization is not simple in this case expressjs/security-wg#31 (comment), so I will like to unblock this PR 😄

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@UlisesGascon UlisesGascon UlisesGascon approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@carpasse @blakeembrey @wesleytodd @UlisesGascon