romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-07-24 14:27:16 +03:00
Code Issues Projects Releases Packages Wiki Activity

GHA: pin containers to hash (where missing)

Browse source 
Fixing this with zizmor v1.25.0:
```
error[unpinned-images]: unpinned image references
  --> .github/workflows/linux-old.yml:59:5
59 |     container: 'debian:stretch'
   |     ^^^^^^^^^^^^^^^^^^^^^^^^^^^ container image is not pinned to a SHA256 hash
   = help: audit documentation -> https://docs.zizmor.sh/audits/#unpinned-images
[...]
```
Ref: https://github.com/curl/curl/actions/runs/25890035949/job/76090925291?pr=21618

Sadly there is no automatic mechanism to bump them..

Also:
- replace `debian-stretch` with its slim variant.
- bump one of the two Alpine jobs from 3.20 to 3.23.4.

Closes #21619
This commit is contained in:
Viktor Szakats 2026-05-15 00:50:18 +02:00
parent cc5eb4aba9
commit ef068fc8b7
No known key found for this signature in database
2 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.github/workflows/linux-old.yml vendored
View file

@ -56,7 +56,7 @@ jobs:
cmake-autotools:
name: 'autotools & cmake'
runs-on: ubuntu-latest
container: 'debian:stretch'
container: debian:stretch-20220622-slim@sha256:c5cd3ffceeb25b683bf5111ea89bf8049a177e00fb237235d48076a19cc80097
steps:
- name: 'install prereqs'