Pin Actions with Secrets to Full-Length Commit SHAs
tip
This check is currently under development and not yet implemented. Click here to learn how you can help.
Use Case
- Incubating: deferrable
- Active: expected
- Retiring: n/a
Description
Pin Actions with Access to Secrets to a Full Length Commit SHA
Details
- C-SCRM: true
- Priority Group: P13
- Mitre: CWE-1357
- Sources: Github Docs