Bump guibranco/github-infisical-secrets-check-action from 4.1.17 to 4.1.18 #172
Conversation
Bumps [guibranco/github-infisical-secrets-check-action](https://github.com/guibranco/github-infisical-secrets-check-action) from 4.1.17 to 4.1.18. - [Release notes](https://github.com/guibranco/github-infisical-secrets-check-action/releases) - [Commits](guibranco/github-infisical-secrets-check-action@v4.1.17...v4.1.18) --- updated-dependencies: - dependency-name: guibranco/github-infisical-secrets-check-action dependency-version: 4.1.18 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Note Free review on us!CodeRabbit is offering free reviews until Wed Oct 08 2025 to showcase some of the refinements we've made. Comment |
gstraccini
bot
added
the
☑️ auto-merge
github-actions
bot
added
the
size/XS
…nfisical-secrets-check-action-4.1.18
![gstraccini[bot]](https://avatars.githubusercontent.com/in/480132?s=60&v=4){kind=small}
guibranco
left a comment
guibranco
left a comment
There was a problem hiding this comment.
Automatically approved by gstraccini[bot]
|
@dependabot squash and merge |
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
|
|
||
| - name: Infisical secrets check | ||
| uses: guibranco/github-infisical-secrets-check-action@v4.1.17 | ||
| uses: guibranco/github-infisical-secrets-check-action@v4.1.18 |
There was a problem hiding this comment.
security (yaml.github-actions.security.third-party-action-not-pinned-to-commit-sha): An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload.
Source: opengrep
|
One of your CI runs failed on this pull request, so Dependabot won't merge it. Dependabot will still automatically merge this pull request if you amend it and your tests pass. |
|
Infisical secrets check: ✅ No secrets leaked! 💻 Scan logsA new release of infisical is available: 0.41.90 -> 0.42.6
To update, run: sudo apt-get update && sudo apt-get install infisical
12:18PM INF scanning for exposed secrets...
12:18PM INF 99 commits scanned.
12:18PM INF scan completed in 17.1ms
12:18PM INF no leaks found
|
guibranco
deleted the
dependabot/github_actions/guibranco/github-infisical-secrets-check-action-4.1.18
branch
1 participant
Bumps guibranco/github-infisical-secrets-check-action from 4.1.17 to 4.1.18.
Release notes
Sourced from guibranco/github-infisical-secrets-check-action's releases.
Commits
6f11c71Bump guibranco/github-file-reader-action-v2 in the actions-minor group (#127)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot will merge this PR once CI passes on it, as requested by @guibranco.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Description by Korbit AI
What change is being made?
Update the Infisical secrets check GitHub Action from v4.1.17 to v4.1.18 in the workflow.
Why are these changes being made?
Bump to the latest patch release to receive fixes and improvements.