chore(renovate): add pinDigests to github-actions packageRule #3

Closed

privilegedescalation-engineer[bot] wants to merge 1 commits from chore/renovate-pin-action-digests into main

Author	SHA1	Message	Date
Hugh Hackman	c8af99da7c	chore(renovate): add pinDigests to github-actions packageRule Pin GitHub Actions references to full commit SHAs via Renovate. This ensures supply-chain security by preventing floating tags from silently pointing at different commits. Mirrors the change being made in the org-level renovate-config.json (.github PR #63). Applying it directly here ensures new plugins created from this template have SHA pinning from day one. Related: PRI-731 Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-03-22 06:57:30 +00:00

Author

SHA1

Message

Date

Hugh Hackman

c8af99da7c

chore(renovate): add pinDigests to github-actions packageRule

Pin GitHub Actions references to full commit SHAs via Renovate.
This ensures supply-chain security by preventing floating tags
from silently pointing at different commits.

Mirrors the change being made in the org-level renovate-config.json
(.github PR #63). Applying it directly here ensures new plugins
created from this template have SHA pinning from day one.

Related: PRI-731

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-03-22 06:57:30 +00:00

chore(renovate): add pinDigests to github-actions packageRule #3

1 Commits