Terry Howe 3a8927e275 fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow ...

Pin the remaining unpinned GitHub Action reference to a full commit SHA,
matching the pinning convention already used across other workflows in
this repository. Aligns with the Kubernetes GitHub Actions security policy.

Signed-off-by: George Jenkins <gvjenkins@gmail.com>

2026-04-09 13:26:54 -07:00

..

build-test.yml

backport #30677to dev3

2025-04-18 10:45:19 +08:00

codeql-analysis.yml

Adding CI for dev-v3 branch

2024-11-11 06:17:45 -07:00

golangci-lint.yml

backport #30677to dev3

2025-04-18 10:45:19 +08:00

govulncheck.yml

fix: govulncheck workflow

2025-05-12 21:58:43 -07:00

release.yml

Use latest patch release of Go in releases

2025-12-11 10:37:28 -05:00

scorecards.yml

fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow

2026-04-09 13:26:54 -07:00

stale-issue-bot.yaml

chore(deps): bump actions/stale from 3.0.14 to 9.0.0

2024-10-09 19:55:48 +00:00