Skip to content
Lockdown untrusted workflows

fix(ci): OSSF Changes #350

Sign in to view logs

fix(ci): OSSF Changes

fix(ci): OSSF Changes #350

Triggered via pull request February 14, 2025 13:39
@sthulbsthulb
opened #1769
ossf
Status Failure
Total duration 13s
Artifacts –

secure_workflows.yml

on: pull_request
Harden Security
4s
Harden Security
Fit to window
Zoom out
Zoom in

Annotations

2 errors
Harden Security
google/osv-scanner-action/.github/workflows/[email protected] is not pinned to a full length commit SHA.
Harden Security
At least one workflow contains an unpinned GitHub Action version.