Skip to content
Lockdown untrusted workflows

use v2 for gitleaks-action artifact in gh workflow #55

Sign in to view logs

use v2 for gitleaks-action artifact in gh workflow

use v2 for gitleaks-action artifact in gh workflow #55

Triggered via push February 11, 2025 10:36
@cornelcroicornelcroi
pushed 5819162
main
Status Failure
Total duration 12s
Artifacts –

on-workflow-update.yml

on: push
Harden Security
3s
Harden Security
Fit to window
Zoom out
Zoom in

Annotations

4 errors and 1 warning
Harden Security
actions/upload-pages-artifact@v3 is not pinned to a full length commit SHA.
Harden Security
actions/checkout@v4 is not pinned to a full length commit SHA.
Harden Security
gitleaks/gitleaks-action@v2 is not pinned to a full length commit SHA.
Harden Security
At least one workflow contains an unpinned GitHub Action version.
Harden Security
The "security-checks" job of the "on-push.yml" workflow does not contain uses or steps.