python-tuf/.github
Jussi Kukkonen d5c953d575 workflows: Partially revert action versions
Commit f0058259 started not pinning hashes for actions that are used in
workflows that have no runtime or build security impact.

The change does not work for scorecard as scorecard does not tag "v2":
so we have to pin it. Luckily scorecard does not do that many releases.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
2023-10-09 18:40:56 +03:00
..
workflows workflows: Partially revert action versions 2023-10-09 18:40:56 +03:00
dependabot.yml Have dependabot also monitor actions 2021-09-08 10:56:16 +01:00
ISSUE_TEMPLATE.md Add issue and pull request templates 2017-09-28 17:01:56 -04:00
PULL_REQUEST_TEMPLATE.md Fix automatic issue closing 2020-10-07 13:11:12 +03:00