Skip to content

chore(github-actions): enable Renovate SHA pinning#96

Open
batch-changes-sourcegraph[bot] wants to merge 1 commit into
masterfrom
security/enable-renovate-sha-pinning
Open

chore(github-actions): enable Renovate SHA pinning#96
batch-changes-sourcegraph[bot] wants to merge 1 commit into
masterfrom
security/enable-renovate-sha-pinning

Conversation

@batch-changes-sourcegraph

Copy link
Copy Markdown

Security: GitHub Actions SHA Pinning

This enables Renovate-based GitHub Actions SHA pinning for this repository.

What changed

  • Adds a SHA-pinning-only Renovate config
  • Adds a thin Renovate workflow using CoreWeave's shared reusable workflow
  • Runs Renovate on cw-dind-small-org
  • Disables GitHub Actions version updates during this pinning phase
  • Disables Docker/container image updates during this pinning phase

What happens next

After this merges, Renovate should open a follow-up PR pinning workflow
uses: refs to 40-character commit SHAs while preserving readable version
comments.

Created by Sourcegraph batch change batch-changes-bot/enable-coreweave-renovate-sha-pinning-no-dependabot.

Co-authored-by: Sourcegraph <batch-changes@sourcegraph.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants