[Bug 66658] Reference GitHub Actions and Docker Images by SHA

2023-10-04 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66658 Mark Thomas changed: What|Removed |Added Status|NEEDINFO|RESOLVED Resolution|---

[Bug 66658] Reference GitHub Actions and Docker Images by SHA

2023-07-24 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66658 --- Comment #2 from Diogo Sant Anna --- Hi Mark, thanks for the thoughtful reply! I understand your concerns and they are all valid. It really doesn't make much sense to hash-pin dependencies if you don't use any dependency automate tool, and

[Bug 66658] Reference GitHub Actions and Docker Images by SHA

2023-07-24 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=66658 Mark Thomas changed: What|Removed |Added Status|NEW |NEEDINFO --- Comment #1 from Mark Thomas