-
-
Notifications
You must be signed in to change notification settings - Fork 52
Commit
- Loading branch information
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -41,10 +41,10 @@ jobs: | |
|
||
steps: | ||
- name: Checkout code | ||
uses: actions/checkout@v3 | ||
uses: actions/checkout@v4 | ||
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 4: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io Click Remediation section below for further remediation help |
||
|
||
- name: Setup Python 3.10 | ||
uses: actions/setup-python@v4 | ||
uses: actions/setup-python@v5 | ||
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 4: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io Click Remediation section below for further remediation help |
||
with: | ||
python-version: '3.10' | ||
|
||
|
@@ -92,10 +92,10 @@ jobs: | |
|
||
steps: | ||
- name: Checkout code | ||
uses: actions/checkout@v3 | ||
uses: actions/checkout@v4 | ||
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 4: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io Click Remediation section below for further remediation help |
||
|
||
- name: Setup python 3.10 | ||
uses: actions/setup-python@v4 | ||
uses: actions/setup-python@v5 | ||
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 1: GitHub-owned GitHubAction not pinned by hash
Click Remediation section below to solve this issue |
||
with: | ||
python-version: '3.10' | ||
|
||
|
@@ -205,7 +205,7 @@ jobs: | |
target_platform: ${{ matrix.target }} | ||
|
||
- name: Retrieve source code | ||
uses: actions/checkout@v3 | ||
uses: actions/checkout@v4 | ||
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 4: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io Click Remediation section below for further remediation help |
||
|
||
- name: Compile source code | ||
shell: bash | ||
|
@@ -256,7 +256,7 @@ jobs: | |
fi | ||
- name: Upload code coverage | ||
uses: codecov/codecov-action@v3 | ||
uses: codecov/codecov-action@v4 | ||
Check warning Code scanning / Scorecard Pinned-Dependencies Medium
score is 1: third-party GitHubAction not pinned by hash
Click Remediation section below to solve this issue |
||
if: matrix.coverage | ||
with: | ||
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} | ||
|