Skip to content

chore: hash-pin everything #165

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Apr 22, 2025
Merged

chore: hash-pin everything #165

merged 4 commits into from
Apr 22, 2025

Conversation

woodruffw
Copy link
Member

@woodruffw woodruffw commented Apr 22, 2025

Switches to requirements/%.{in,txt} and uses uv pip compile to manage them.

Also uses frizebee actions to hash-pin all of our CI/CD actions references.

Signed-off-by: William Woodruff <william@trailofbits.com>
@woodruffw woodruffw self-assigned this Apr 22, 2025
Signed-off-by: William Woodruff <william@trailofbits.com>
Signed-off-by: William Woodruff <william@trailofbits.com>
Signed-off-by: William Woodruff <william@trailofbits.com>
@woodruffw woodruffw requested review from di, bobcallaway and jku April 22, 2025 19:13
@woodruffw woodruffw added the dependencies Pull requests that update a dependency file label Apr 22, 2025
@woodruffw woodruffw merged commit ee10b53 into main Apr 22, 2025
31 checks passed
@woodruffw woodruffw deleted the ww/hash-pinning branch April 22, 2025 20:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants