Skip to content

VLN-1487: remediate unpinned-github-actions#405

Open
picatz wants to merge 2 commits into
mainfrom
camper/unpinned-github-actions-finding-unpinned-github-actions-temporalio-omes
Open

VLN-1487: remediate unpinned-github-actions#405
picatz wants to merge 2 commits into
mainfrom
camper/unpinned-github-actions-finding-unpinned-github-actions-temporalio-omes

Conversation

@picatz

@picatz picatz commented Jun 11, 2026

Copy link
Copy Markdown
Contributor

🏕️ This pull request was created by camper, an automated security campaign tool.

Finding

Ruleunpinned-github-actions
SeverityMEDIUM
Repositorytemporalio/omes
TicketVLN-1487

Summary

🤠 Deputy pinned dependencies to immutable references.

  • Total refs: 18
  • Pinned refs: 1
  • Already pinned: 17

Changed references:

  • actions/checkout: v4 -> 34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1

Instructions

  • Approve to merge this fix
  • Request changes to trigger a new remediation attempt
  • /camper rebase — rebase onto the base branch
  • /camper close — close this PR without merging
  • /camper retry — close and retry with a new fix

@picatz
picatz requested review from a team as code owners June 11, 2026 18:27
@picatz

picatz commented Jun 18, 2026

Copy link
Copy Markdown
Contributor Author

This PR has had no activity for 7 days and may need attention.

Actions you can take:

  • Review and approve if the changes look good
  • Close if this fix is no longer needed
  • Comment /camper rebase to rebase onto the latest base branch
  • Comment /camper retry to regenerate the fix

3 similar comments
@picatz

picatz commented Jun 25, 2026

Copy link
Copy Markdown
Contributor Author

This PR has had no activity for 7 days and may need attention.

Actions you can take:

  • Review and approve if the changes look good
  • Close if this fix is no longer needed
  • Comment /camper rebase to rebase onto the latest base branch
  • Comment /camper retry to regenerate the fix

@picatz

picatz commented Jul 2, 2026

Copy link
Copy Markdown
Contributor Author

This PR has had no activity for 7 days and may need attention.

Actions you can take:

  • Review and approve if the changes look good
  • Close if this fix is no longer needed
  • Comment /camper rebase to rebase onto the latest base branch
  • Comment /camper retry to regenerate the fix

@picatz

picatz commented Jul 9, 2026

Copy link
Copy Markdown
Contributor Author

This PR has had no activity for 7 days and may need attention.

Actions you can take:

  • Review and approve if the changes look good
  • Close if this fix is no longer needed
  • Comment /camper rebase to rebase onto the latest base branch
  • Comment /camper retry to regenerate the fix

@picatz

picatz commented Jul 9, 2026

Copy link
Copy Markdown
Contributor Author

Heads up: this PR has been inactive and is scheduled to be auto-closed (expired) in about 2 day(s) unless there's new activity. Merge, comment, or push to keep it open. Expired PRs are not marked as failed and can be reopened later with camper finding remediate.

@picatz

picatz commented Jul 23, 2026

Copy link
Copy Markdown
Contributor Author

This PR has had no activity for 13 days and may need attention.

Actions you can take:

  • Review and approve if the changes look good
  • Close if this fix is no longer needed
  • Comment /camper rebase to rebase onto the latest base branch
  • Comment /camper retry to regenerate the fix

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants