Skip to content

Conversation

arnavshah01
Copy link
Collaborator

@arnavshah01 arnavshah01 commented May 21, 2025

with:
fetch-depth: 0

- name: Install uv
uses: astral-sh/setup-uv@v5

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'build_and_deploy.yml' step
Uses Step
uses 'astral-sh/setup-uv' with ref 'v5', not a pinned commit hash
@@ -77,7 +78,7 @@

- name: Login to Amazon ECR
id: login-ecr
uses: aws-actions/amazon-ecr-login@v1
uses: aws-actions/amazon-ecr-login@v2

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'build_and_deploy.yml' step
Uses Step: login-ecr
uses 'aws-actions/amazon-ecr-login' with ref 'v2', not a pinned commit hash
- name: Checkout Code Repository
uses: actions/checkout@v4
with:
fetch-depth: 0

- name: Install uv
uses: astral-sh/setup-uv@v5

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'build_and_deploy_gcp.yml' step
Uses Step
uses 'astral-sh/setup-uv' with ref 'v5', not a pinned commit hash
Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants