Stirling-PDF/.github/workflows
StepSecurity Bot 6496015af7
[StepSecurity] ci: Harden GitHub Actions (#3901)
## Summary

This pull request is created by
[StepSecurity](https://app.stepsecurity.io/securerepo) at the request of
@Ludy87. Please merge the Pull Request to incorporate the requested
changes. Please tag @Ludy87 on your message if you have any questions
related to the PR.
## Security Fixes

### Pinned Dependencies

GitHub Action tags and Docker tags are mutable. This poses a security
risk. GitHub's Security Hardening guide recommends pinning actions to
full length commit.

- [GitHub Security
Guide](https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions)
- [The Open Source Security Foundation (OpenSSF) Security
Guide](https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies)


## Feedback
For bug reports, feature requests, and general feedback; please email
support@stepsecurity.io. To create such PRs, please visit
https://app.stepsecurity.io/securerepo.


Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
2025-07-07 22:21:58 +01:00
..
ai_pr_title_review.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00
auto-labeler.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00
auto-labelerV2.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00
build.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00
check_properties.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00
codeql.yml-disabled Bump: Harden Runner from v2.10.2 to v2.10.3 (#2686) 2025-01-13 22:26:05 +00:00
dependency-review.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00
licenses-update.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00
manage-label.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00
multiOSReleases.yml [StepSecurity] ci: Harden GitHub Actions (#3901) 2025-07-07 22:21:58 +01:00
PR-Demo-cleanup.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00
PR-Demo-Comment-with-react.yml Update PR-Demo-Comment-with-react.yml (#3894) 2025-07-07 15:17:31 +01:00
pre_commit.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00
push-docker.yml Update push-docker.yml 2025-07-03 20:20:23 +01:00
releaseArtifacts.yml chore(deps): bump sigstore/cosign-installer from 3.9.0 to 3.9.1 (#3801) 2025-07-01 15:40:09 +01:00
scorecards.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00
sonarqube.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00
stale.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00
swagger.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00
sync_files.yml chore: include ignore_translation.toml in README sync commit (#3845) 2025-07-01 15:49:58 +01:00
testdriver.yml chore(deps): bump step-security/harden-runner from 2.12.1 to 2.12.2 (#3849) 2025-07-01 15:39:12 +01:00