Sascha Mann 216aaef29a Pin third party action to hash (#106) ...

Third party actions should never not be pinned to a hash. Otherwise, in case the action repo is taken over by a malicious actor, they can change what runs in all of the workflows that julia-actions/cache is used in as well. Pinning to a hash prevents that.

2024-01-18 10:21:26 -05:00

7.2 KiB

Raw Blame History

View Raw