Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ci] Pin 3rd party actions to specific hash #7690

Merged
merged 2 commits into from
Mar 21, 2025
Merged

[ci] Pin 3rd party actions to specific hash #7690

merged 2 commits into from
Mar 21, 2025

Conversation

poteto
Copy link
Member

@poteto poteto commented Mar 21, 2025

poteto added 2 commits March 21, 2025 16:24
Defaults permissions to none for all workflows, and only request extra permissions when needed.

Similar to facebook/react#32708, prefer the less permissive `pull_request` trigger instead.
Copy link

vercel bot commented Mar 21, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
19-react-dev ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 21, 2025 8:30pm
react-dev ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 21, 2025 8:30pm

Copy link

Size changes

📦 Next.js Bundle Analysis for react-dev

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

@poteto poteto merged commit f6d762c into main Mar 21, 2025
14 checks passed
@poteto poteto deleted the pr7690 branch March 21, 2025 20:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants