CI: 将剩余的 GitHub Actions 绑定到提交 SHA (第 3503 条缺失 4 个位置, OSSF Pinned-Dependencies 为 5/10, 正是因为这些原因)
作者: holistis创建于 2026年9月8日更新于 2026年9月12日
.GitHub/workflows/codeql.yml
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
already the exact SHA used by every other workflow in this repo
- uses: GitHub/codeql-action/init@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
- uses: GitHub/codeql-action/analyze@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
same commit already pinned for codeql-action/upload-sarif in scorecard.yml
内容来源: camel-ai/camel