Lockdown untrusted workflows

update GA #24

Sign in to view logs

Annotations

3 errors and 2 warnings

actions/checkout@v3 is not pinned to a full length commit SHA.

actions/setup-python@v4 is not pinned to a full length commit SHA.

At least one workflow contains an unpinned GitHub Action version.

The following actions use a deprecated Node.js version and will be forced to run on node20: zgosalvez/github-actions-ensure-sha-pinned-actions@f32435541e24cd6a4700a7f52bb2ec59e80603b1. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

The "security-checks" job of the "on-push.yml" workflow does not contain uses or steps.

This job failed