Pin actions/github-script by Git SHA#1859
Merged
Uh oh!
There was an error while loading. Please reload this page.
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
There was a problem hiding this comment.
Pull Request Overview
This PR pins the actions/github-script action to a specific Git SHA for improved security by preventing potential supply chain attacks through version pinning.
- Replaces version tag reference with SHA-based pinning for
actions/github-script
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
joseph-sentry approved these changes Aug 17, 2025
joseph-sentry merged commit 39a2af1 into codecov:main 11 checks passed
Uh oh!
There was an error while loading. Please reload this page.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@## main #1859 +/- ## ============================ ============================ ☔ View full report in Codecov by Sentry. |
Trott added a commit to Trott/io.js that referenced this pull request Aug 18, 2025
nodejs-github-bot pushed a commit to nodejs/node that referenced this pull request Aug 18, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: #59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
panva pushed a commit to panva/node that referenced this pull request Aug 18, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: nodejs#59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
viceice commented Aug 18, 2025
Please publish a new release with this fix |
6 tasks
marco-ippolito pushed a commit to nodejs/node that referenced this pull request Aug 20, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: #59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
marco-ippolito pushed a commit to nodejs/node that referenced this pull request Aug 20, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: #59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
aduh95 pushed a commit to nodejs/node that referenced this pull request Aug 21, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: #59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
targos pushed a commit to nodejs/node that referenced this pull request Aug 21, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: #59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
marco-ippolito pushed a commit to nodejs/node that referenced this pull request Aug 23, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: #59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
marco-ippolito pushed a commit to nodejs/node that referenced this pull request Aug 25, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: #59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
marco-ippolito pushed a commit to nodejs/node that referenced this pull request Aug 25, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: #59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
marco-ippolito pushed a commit to nodejs/node that referenced this pull request Aug 25, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: #59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
marco-ippolito pushed a commit to nodejs/node that referenced this pull request Aug 25, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: #59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
aduh95 pushed a commit to nodejs/node that referenced this pull request Aug 25, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: #59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
aduh95 pushed a commit to nodejs/node that referenced this pull request Aug 26, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: #59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
marco-ippolito pushed a commit to nodejs/node that referenced this pull request Aug 26, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: #59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
marco-ippolito pushed a commit to nodejs/node that referenced this pull request Aug 27, 2025
Refs: codecov/codecov-action#1859 Refs: codecov/codecov-action#1858 PR-URL: #59512 Reviewed-By: Filip Skokan <[email protected]> Reviewed-By: Michaël Zasso <[email protected]> Reviewed-By: Zeyu "Alex" Yang <[email protected]> Reviewed-By: Moshe Atlow <[email protected]> Reviewed-By: Daeyeon Jeong <[email protected]> Reviewed-By: Pietro Marchini <[email protected]>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Resolves#1858.