microsoft / microsoft/Windows-driver-samples
Pin tj-actions/changed-files to commit hash
Open
@v-junyli is already working on this.
Since Jun 9, 2025.
request
- Dominant language
- C
- Stars
- 7.8k
- Forks
- 5k
- Avg merge
- 3d 17h
- Merged PRs (30d)
- 7
Description
Per GitHub security recommendations, all (3rd-party) actions should be pinned to a commit hash because these version tags are mutable.
Consider adding codeql to this repo.
https://github.com/github/codeql/blob/main/actions/ql/src/Security/CWE-829/UnpinnedActionsTag.md
_Originally posted by @joebowbeer in [d504c54](https://github.com/microsoft/Windows-driver-samples/commit/d504c54cf595e9185617a3e611e417617be8c0b8#r154501982)_
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.