11
0
Fork 0
mirror of https://github.com/wagoid/commitlint-github-action.git synced 2026-03-30 22:36:54 +00:00

fix: pin Docker image by digest to prevent supply chain attacks

This commit is contained in:
Daniel-Aaron-Bloom 2026-03-26 21:37:06 -05:00 committed by GitHub
parent b948419dd9
commit 4a4f3064e5
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -35,7 +35,7 @@ outputs:
description: The error and warning messages for each one of the analyzed commits
runs:
using: docker
image: docker://wagoid/commitlint-github-action:6.2.1
image: docker://wagoid/commitlint-github-action@sha256:86a04e0a99128551a7555c269d2b675c3c85f61358cf7dd558f6b873b66f561a
branding:
icon: check-square
color: blue