ethereum / ethereum/execution-specs
Consider an alternative to zgosalvez/github-actions-ensure-sha-pinned-actions
Open
A-ci
C-chore
stale
- Dominant language
- Python
- Stars
- 1.2k
- Forks
- 505
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 106
Description
We could try using a more general security analysis tool instead of a dedicated tool solely for this task, .e.g, https://github.com/ossf/scorecard-action. In which case we should update our list of whitelisted actions in the repo settings.
Contributor guide
Assessment
This issue has not been assessed yet.