Skip to content

Security: Outdated GitHub Actions detected #154

Description

@nerdalytics

Outdated GitHub Actions Detected

The following actions have newer versions available:

Action Current Latest Recommended Update
actions/checkout v7.0.0 v7.0.1 actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
actions/setup-node v6.4.0 v7.0.0 actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
actions/cache v5.0.5 v6.1.0 actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
jdx/mise-action v4.2.0 v4.2.3 jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4.2.3

How to Update

Replace each action reference in your workflow files with the SHA-pinned version shown in the "Recommended Update" column.

Why SHA Pinning?

Pinning to a commit SHA prevents supply chain attacks where a malicious actor could move a tag to point to compromised code.


This issue was automatically generated by the check-action-versions workflow.

Metadata

Metadata

Assignees

No one assigned

    Labels

    dependenciesDependency updatessecuritySecurity-related issues

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions