On Mon, 22 Jun 2026 08:38:52 GMT, Christian Stein <[email protected]> wrote:

> Please review this change to update all used GitHub Actions and also pin them 
> to dedicated hash values.
> 
> ---------
> - [x] I confirm that I make this contribution in accordance with the [OpenJDK 
> Interim AI Policy](https://openjdk.org/legal/ai).

> Not pinning leaves space for supply chain attacks.

That's why we cannot have nice things.

-------------

Marked as reviewed by shade (Reviewer).

PR Review: https://git.openjdk.org/jdk/pull/31603#pullrequestreview-4543213574

Reply via email to