Skip to content
Lockdown untrusted workflows

use v3 for gitleaks-action artifact in gh workflow #54

Sign in to view logs

use v3 for gitleaks-action artifact in gh workflow

use v3 for gitleaks-action artifact in gh workflow #54

Triggered via push February 11, 2025 10:35
@cornelcroicornelcroi
pushed 2ae8637
main
Status Failure
Total duration 13s
Artifacts –

on-workflow-update.yml

on: push
Harden Security
3s
Harden Security
Fit to window
Zoom out
Zoom in

Annotations

3 errors and 1 warning
Harden Security
actions/upload-pages-artifact@v3 is not pinned to a full length commit SHA.
Harden Security
gitleaks/gitleaks-action@v4 is not pinned to a full length commit SHA.
Harden Security
At least one workflow contains an unpinned GitHub Action version.
Harden Security
The "security-checks" job of the "on-push.yml" workflow does not contain uses or steps.