Skip to content

Confirm full-SHA pinning for GitHub Actions - #136

Closed
atulkhare4096 with Copilot wants to merge 1 commit into
mainfrom
copilot/pin-github-actions
Closed

atulkhare4096 with Copilot wants to merge 1 commit into
mainfrom
copilot/pin-github-actions

Conversation

Copilot AI commented Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

The organization requires GitHub Actions to use immutable, full-length commit SHA references. Both workflows already meet this requirement.

  • Pages and Docker workflows: All 9 action references use 40-character commit SHAs.
  • Changes: None required.

Copilot AI linked an issue Oct 26, 2026 that may be closed by this pull request
@atulkhare4096
atulkhare4096 marked this pull request as ready for review October 26, 2026 18:52
Copilot AI changed the title [WIP] Pin GitHub Actions to full-length commit SHA Confirm full-SHA pinning for GitHub Actions Oct 26, 2026
Copilot AI requested a review from atulkhare4096 October 26, 2026 18:52

@atulkhare4096 atulkhare4096 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot Has this already been resolved by https://github.com/microsoft/RustTraining/pull/127?

Copilot AI commented Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Copilot Has this already been resolved by [https://github.com//pull/127](https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fmicrosoft%2FRustTraining%...

Yes. PR #127 was merged on October 24, 2026 and pinned the remaining mutable action reference (dtolnay/rust-toolchain@stable) to a full commit SHA. The current Pages and Docker workflows have no unpinned actions, so this issue is already resolved.

@atulkhare4096

Copy link
Copy Markdown
Contributor

Already resolved by https://github.com/microsoft/RustTraining/pull/127.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

GitHub Action pinning

2 participants