[openssh-commits] [openssh] branch master updated (0d156d385 -> 01404fa5d)

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

dtucker pushed a change to branch master
in repository openssh.

    from 0d156d385 upstream: Factor out hex2bin into a shared helper function.
     new 983096a7b ci: pin GitHub Actions to full commit SHAs
     new faa646a9b ci: pin upstream.yml actions to full commit SHAs
     new 01404fa5d Add script to lookup and pin Actions to hashes.

The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Detailed log of new commits:

commit 01404fa5da11ed08c6ebecd09aaa3ebfbd79f206
Author: Darren Tucker <dtucker at dtucker.net>
Date:   Mon Jun 22 19:00:15 2026 +1000

    Add script to lookup and pin Actions to hashes.
    
    Update recently changed Cygwin Actions and pin remaining unpinned ones.

commit faa646a9bf6c8d0ec2d8a52dcd155979c8f7eb8e
Author: El Mehdi Abenhazou <mehdiananas007 at gmail.com>
Date:   Wed Jun 3 02:02:31 2026 +0100

    ci: pin upstream.yml actions to full commit SHAs
    
    Signed-off-by: El Mehdi Abenhazou <mehdiananas007 at gmail.com>

commit 983096a7b27eaf789b5ceb321867d4511ba779c3
Author: El Mehdi Abenhazou <mehdiananas007 at gmail.com>
Date:   Wed Jun 3 02:02:30 2026 +0100

    ci: pin GitHub Actions to full commit SHAs
    
    Pinning actions/checkout, actions/upload-artifact, and
    cygwin/cygwin-install-action to their full commit SHA instead of
    mutable branch/tag references (main, master).
    
    Using mutable refs means a compromised or malicious update to the
    action repository could silently alter the workflow behavior.
    Pinning to SHA makes the exact version immutable and auditable.
    
    Signed-off-by: El Mehdi Abenhazou <mehdiananas007 at gmail.com>

Summary of changes:
 .github/pin_actions.sh           | 33 +++++++++++++++++++++++++++++++++
 .github/workflows/c-cpp.yml      |  8 ++++----
 .github/workflows/cifuzz.yml     |  6 +++---
 .github/workflows/selfhosted.yml |  8 ++++----
 .github/workflows/upstream.yml   |  4 ++--
 .github/workflows/vm.yml         | 32 ++++++++++++++++----------------
 6 files changed, 62 insertions(+), 29 deletions(-)
 create mode 100755 .github/pin_actions.sh

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.