rlenferink opened a new pull request #314:
URL: https://github.com/apache/celix/pull/314


   Also pin the 3rd party codecov action using a hash
   
   Following the discussion on the [email protected] & users@infra list it is 
recommended to not use branches for GH actions and instead use tags instead.
   For third party actions (anything not from `github/`, `actions/` and 
`apache/`) it is advised to pin them using a hash.
   
   For detailed info see the following threads:
   - 
https://lists.apache.org/thread.html/r900f8f9a874006ed8121bdc901a0d1acccbb340882c1f94dad61a5e9%40%3Cusers.infra.apache.org%3E
   - 
https://lists.apache.org/thread.html/r435c45dfc28ec74e28314aa9db8a216a2b45ff7f27b15932035d3f65%40%3Cbuilds.apache.org%3E


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to