Skip to content

ci: pin versions to shas, configure dependabot for actions, go 1.25 -> 1.26.5#78

Open
brhoades wants to merge 4 commits into
kolide:mainfrom
brhoades:billy/harden-ci
Open

ci: pin versions to shas, configure dependabot for actions, go 1.25 -> 1.26.5#78
brhoades wants to merge 4 commits into
kolide:mainfrom
brhoades:billy/harden-ci

Conversation

@brhoades

Copy link
Copy Markdown

KOL-786

GitHub hardening docs recommend pinning third party actions.

Changes:

  • Lock down actionlint and govulncheck to specific sha.
  • Configure dependabot for GitHub actions.
  • Bump to go 1.26.5 for GO-2026-5856.

brhoades added 4 commits July 16, 2026 15:18
Signed-off-by: Billy J Rhoades II <billy.rhoades@agilebits.com>
Signed-off-by: Billy J Rhoades II <billy.rhoades@agilebits.com>
Signed-off-by: Billy J Rhoades II <billy.rhoades@agilebits.com>
Signed-off-by: Billy J Rhoades II <billy.rhoades@agilebits.com>
@brhoades
brhoades requested a review from zackattack01 July 16, 2026 22:25
@brhoades
brhoades marked this pull request as ready for review July 16, 2026 22:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants