From c0030c271c11cb85760d5a5b370a1d9ab2546a20 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Aur=C3=A9lien=20Bombo?= Date: Mon, 8 Sep 2025 11:17:54 -0500 Subject: [PATCH] ci: security: Fix "commit hash does not point to a Git tag" MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This fixes all such issues, ie.: https://github.com/kata-containers/kata-containers/security/code-scanning/459 https://github.com/kata-containers/kata-containers/security/code-scanning/508 https://github.com/kata-containers/kata-containers/security/code-scanning/510 Signed-off-by: Aurélien Bombo --- .github/workflows/commit-message-check.yaml | 2 +- .github/workflows/shellcheck.yaml | 2 +- .github/workflows/shellcheck_required.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/commit-message-check.yaml b/.github/workflows/commit-message-check.yaml index c8efcdcee4..469dd91bad 100644 --- a/.github/workflows/commit-message-check.yaml +++ b/.github/workflows/commit-message-check.yaml @@ -41,7 +41,7 @@ jobs: filter_out_pattern: '^Revert "|^Reapply "' - name: DCO Check - uses: tim-actions/dco@2fd0504dc0d27b33f542867c300c60840c6dcb20 # master (2020-04-28) + uses: tim-actions/dco@f2279e6e62d5a7d9115b0cb8e837b777b1b02e21 # v1.1.0 with: commits: ${{ steps.get-pr-commits.outputs.commits }} diff --git a/.github/workflows/shellcheck.yaml b/.github/workflows/shellcheck.yaml index d9ea97c5cc..069e0b5e07 100644 --- a/.github/workflows/shellcheck.yaml +++ b/.github/workflows/shellcheck.yaml @@ -26,6 +26,6 @@ jobs: fetch-depth: 0 persist-credentials: false - name: Run ShellCheck - uses: ludeeus/action-shellcheck@00b27aa7cb85167568cb48a3838b75f4265f2bca # master (2024-06-20) + uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # v2.0.0 with: ignore_paths: "**/vendor/**" diff --git a/.github/workflows/shellcheck_required.yaml b/.github/workflows/shellcheck_required.yaml index 35c1ee10f1..a6308fc19f 100644 --- a/.github/workflows/shellcheck_required.yaml +++ b/.github/workflows/shellcheck_required.yaml @@ -28,7 +28,7 @@ jobs: persist-credentials: false - name: Run ShellCheck - uses: ludeeus/action-shellcheck@00b27aa7cb85167568cb48a3838b75f4265f2bca # master (2024-06-20) + uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # v2.0.0 with: severity: error ignore_paths: "**/vendor/**"