[all-commits] [llvm/llvm-project] 161f64: [Github][CI] Hashpin actions dependencies (#127011)

[Aiden Grossman via All-commits]

  Branch: refs/heads/main
  Home:   https://github.com/llvm/llvm-project
  Commit: 161f64a4c1eb86856891816c1569d3e92f4535bd
      https://github.com/llvm/llvm-project/commit/161f64a4c1eb86856891816c1569d3e92f4535bd
  Author: Aiden Grossman <aidengrossman at google.com>
  Date:   2025-02-13 (Thu, 13 Feb 2025)

  Changed paths:
    M .github/workflows/build-ci-container-windows.yml
    M .github/workflows/build-ci-container.yml
    M .github/workflows/premerge.yaml

  Log Message:
  -----------
  [Github][CI] Hashpin actions dependencies (#127011)

This patch has pins several actions dependencies in the premerge
workflow and the Windows/Linux container build workflows to help improve
security in the unlikely event that someone tries to pull off a supply
chain security attack by modifying release asserts for these actions.



To unsubscribe from these emails, change your notification settings at https://github.com/llvm/llvm-project/settings/notifications