Skip to content

Commit 568c3ce

Browse files
authored
[chore] enable github action pin digest helper in renovatebot (#12799)
#### Description As part of the security slam, we've been working to pin digests in GitHub actions. There's some tools that can run through and pin everything, but without the notes and comments of every versioned, it can be difficult to understand what is actually being pinned. Thus, I'm opting to add the [renovate helper](https://docs.renovatebot.com/modules/manager/github-actions/#digest-pinning-and-updating) for this in GitHub actions which should automatically manage version pinning. #### Link to tracking issue Related to [#86](open-telemetry/sig-security#87 (comment)) #### Testing Ran `npx --yes --package renovate -- renovate-config-validator renovate.json` after updating the config.
1 parent 4fb7c24 commit 568c3ce

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

renovate.json

+2-1
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,8 @@
88
"go": "1.23"
99
},
1010
"extends": [
11-
"config:recommended"
11+
"config:recommended",
12+
"helpers:pinGitHubActionDigests"
1213
],
1314
"schedule": [
1415
"on tuesday"

0 commit comments

Comments
 (0)