mirror of
https://github.com/kemko/nomad.git
synced 2026-01-03 17:05:43 +03:00
b17c0f7ff9
Trusted Supply Chain Component Registry (TSCCR) enforcement starts Monday and an internal report shows our semgrep action is pinned to a version that's not currently permitted. Update all the action versions to whatever's the new hotness to maximum the time-to-live on these until we have automated pinning setup. Also version bumps our chromedriver action, which randomly broke upstream today.
20 lines
545 B
YAML
20 lines
545 B
YAML
name: Check Copywrite Headers
|
|
|
|
on:
|
|
push: {}
|
|
|
|
jobs:
|
|
copywrite:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
|
|
- uses: hashicorp/setup-copywrite@867a1a2a064a0626db322392806428f7dc59cb3e # v1.1.2
|
|
name: Setup Copywrite
|
|
with:
|
|
version: v0.16.4
|
|
archive-checksum: c299f830e6eef7e126a3c6ef99ac6f43a3c132d830c769e0d36fa347fa1af254
|
|
- name: Check Header Compliance
|
|
run: copywrite headers --plan
|
|
permissions:
|
|
contents: read
|