Terry Howe c61e0860ec fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow ...

Pin the remaining unpinned GitHub Action reference to a full commit SHA,
matching the pinning convention already used across other workflows in
this repository. Aligns with the Kubernetes GitHub Actions security policy.

Signed-off-by: Terry Howe <thowe@nvidia.com>

2026-04-08 14:58:54 -07:00

..

build-test.yml

chore(deps): bump actions/checkout from 6.0.0 to 6.0.1

2025-12-02 21:07:52 +00:00

codeql-analysis.yml

chore(deps): bump actions/checkout from 6.0.0 to 6.0.1

2025-12-02 21:07:52 +00:00

golangci-lint.yml

Merge pull request #31599 from helm/dependabot/github_actions/main/actions/checkout-6.0.1

2025-12-04 16:22:51 +01:00

govulncheck.yml

Run the vulnerability check on PR that change the file

2025-12-09 15:47:56 -05:00

release.yml

Use latest patch release of Go in releases

2025-12-11 10:34:42 -05:00

scorecards.yml

fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow

2026-04-08 14:58:54 -07:00

stale.yaml

chore(deps): bump actions/stale from 10.1.0 to 10.1.1

2025-12-03 21:08:08 +00:00