Skip to content

Conversation

@cmwylie19
Copy link
Contributor

Description

Fixes https://github.com/defenseunicorns/pepr/security/code-scanning/212

The SLSA 3 Workflow needs a pinned dep.

Here is the pinned dep:

> git ls-remote https://github.com/slsa-framework/slsa-github-generator.git refs/tags/v2.1.0

f7dd8c54c2067bafc12ca7a55595d5ee9b75204a	refs/tags/v2.1.0

Here is the sha sum for tag 2.1.0 in the UI

Related Issue

Fixes #

Relates to #

Type of change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Other (security config, docs update, etc)

Checklist before merging

@cmwylie19 cmwylie19 requested a review from a team as a code owner December 1, 2025 22:22
@cmwylie19 cmwylie19 changed the title chore: release hash of slsa3 workflow chore: pinned dep hash of slsa3 workflow Dec 2, 2025
@github-project-automation github-project-automation bot moved this to 👀 In review in Pepr Project Board Dec 8, 2025
@samayer12 samayer12 added this pull request to the merge queue Dec 8, 2025
Merged via the queue into main with commit d96f553 Dec 8, 2025
100 of 101 checks passed
@samayer12 samayer12 deleted the security_alerts_pinned_hash branch December 8, 2025 18:37
@github-project-automation github-project-automation bot moved this from 👀 In review to ✅ Done in Pepr Project Board Dec 8, 2025
@codecov
Copy link

codecov bot commented Dec 8, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 0.00%. Comparing base (4eab7f9) to head (a97f6a4).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files

Impacted file tree graph

@@     Coverage Diff      @@
##   main   #2803   +/-   ##
============================
============================
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: ✅ Done

Development

Successfully merging this pull request may close these issues.

3 participants