fanhuadesenlinnn/1Panel
1
0
Fork 0
mirror of https://hubproxy.babadafafafafa.cn/https://github.com/1Panel-dev/1Panel.git synced 2026-09-21 00:24:12 +08:00
Code Issues Packages Projects Releases Wiki Activity
5,441 Commits 60 Branches 129 Tags
pr@dev-v2@support-enterprise-demo-mode
Commit Graph

5 Commits

Author SHA1 Message Date
Kobi Hikri
85182d9164 ci: pin third-party actions to full commit SHAs (#13259) 
Pin the third-party actions referenced by mutable @master/@main tags to their
current commit SHA (tag kept in a trailing comment). Several run in jobs holding
secrets:

- SonarSource/sonarcloud-github-action@master (sonarcloud-scan.yml) — SONAR_TOKEN
- Yikun/hub-mirror-action@master (sync2gitee.yml) — GITEE_PRIVATE_KEY, GITEE_TOKEN
- fit2cloud/LLM-CodeReview-Action@main (llm-code-review.yml) — tokens + LLM API key
- crate-ci/typos@master (tyops-check.yml)

A moved tag would run unreviewed code with those secrets. Behaviour unchanged;
per GitHub's guidance to pin actions to a full-length commit SHA.

Signed-off-by: Kobi Hikri <kobi.hikri@gmail.com>
 2026-07-14 09:58:52 +08:00
王贺
b18bdea1c9 chore: limit gitee sync workflow to main repo (#11112) 2025-11-28 16:47:37 +08:00
王贺
858322e1fa Merge from dev to dev-v2 (#8069) 2025-03-05 17:47:19 +08:00
wanghe-fit2cloud
062b2f2ae6 chore: 修改同步仓库地址 2024-03-22 14:17:40 +08:00
BugKing
bdcdf7e181 ci: add workflow to sync to Gitee repo 2023-03-18 22:48:17 +08:00