News for hackers. Stuff that matters.
Re:Show HN: Proactive Security Monitoring for GitHub Actions... by ghiaadev on Thursday June 27, 2024 @01:13AM (#40807467)
Tried a test run for my node repo. It worked fine when I used the semver version of the action, but not when I pin the action to the latest release hash as shown in the GitHub marketplace listing docs (Shouldn't the safer practice here work by default??)
Re:Show HN: Proactive Security Monitoring for GitHub Actions... by leodido on Thursday June 27, 2024 @10:56AM (#40811209)
Hello, glad your test run went well!

Would you mind telling us more at [email protected] regarding the pinning? Not sure I got what you mean, just want to be sure. Feel free to send us the details at that email.

Thank you, ~leo