Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: pin codecov's GH action to v3.1.0 #526

Merged
merged 1 commit into from Sep 15, 2022

Conversation

mdelapenya
Copy link
Collaborator

What does this PR do?

It uses the hashed version of Codecov's GH action, pinning it to v3.1.0. See https://github.com/codecov/codecov-action/releases/tag/v3.1.0

Why is it important?

Security concerns about using dynamic version of GH actions

Related issues

@mdelapenya mdelapenya added dependencies Dependencies or external services security Vulnerabilities in dependencies or in the library itself labels Sep 15, 2022
@mdelapenya mdelapenya requested a review from a team as a code owner September 15, 2022 16:57
@mdelapenya mdelapenya self-assigned this Sep 15, 2022
@codecov
Copy link

codecov bot commented Sep 15, 2022

Codecov Report

Merging #526 (749cc61) into main (769d576) will increase coverage by 0.04%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main     #526      +/-   ##
==========================================
+ Coverage   68.85%   68.90%   +0.04%     
==========================================
  Files          22       22              
  Lines        2148     2148              
==========================================
+ Hits         1479     1480       +1     
  Misses        530      530              
+ Partials      139      138       -1     
Impacted Files Coverage Δ
docker.go 71.14% <0.00%> (+0.10%) ⬆️

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@mdelapenya mdelapenya merged commit 280cf69 into testcontainers:main Sep 15, 2022
@mdelapenya mdelapenya deleted the pin-codecov-to-3.1.0 branch September 15, 2022 18:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Dependencies or external services security Vulnerabilities in dependencies or in the library itself
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Codecov GH action: security issue with bash uploader
2 participants