In light of tj actions, would you folks be willing...
# github-actionsr
RB
04/01/2025, 1:53 AMIn light of tj actions, would you folks be willing to pin github action shas across upstream cloudposse github actions like this one ?
https://github.com/cloudposse/github-action-atmos-affected-stacks/pull/67
š 1
RB
04/01/2025, 1:53 AMRenovate will do this for us automatically if enabled
RB
04/01/2025, 11:12 AMMaybe if you folks are ok with this, this can also be proliferated across other cloudposse github repos ?
Pinning is more important for cloudposse published (non javascript) gh actions since downstream users use those which can be susceptible.
ā¢ https://github.com/cloudposse-github-actions/pr-comment-on-release
g
Gabriela Campana (Cloud Posse)
04/02/2025, 6:45 PM@Dan Miller (Cloud Posse)