Antoine du Hamel c7c8d8683a tools: use hashes instead of tags for external actions (#43284) ...

Using tags is a security risk, as they can be updated to point to
anything else.

Refs: https://github.com/nodejs/corepack/pull/117#discussion_r886913592

PR-URL: https://github.com/nodejs/node/pull/43284
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>

2022-06-05 21:45:18 +02:00

..

ISSUE_TEMPLATE

meta: correct link to feature request document

2022-02-23 14:13:59 +00:00

workflows

tools: use hashes instead of tags for external actions (#43284)

2022-06-05 21:45:18 +02:00

CODEOWNERS

bootstrap: include code cache in the embedded snapshot

2022-05-17 20:38:11 +08:00

label-pr-config.yml

tools: refactor build-addons.js to ESM

2022-05-22 14:28:41 +01:00

PULL_REQUEST_TEMPLATE.md

doc: make contributing info more discoverable

2022-01-18 14:24:30 -05:00

SUPPORT.md

doc: remove OpenJSF Slack nodejs from support doc

2021-12-09 08:14:10 -08:00