Skip to content

Commit 57f1329

Browse files
data-douserCopilot
andauthored
Update .github/instructions/github_workflows_yaml.instructions.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
1 parent f210a75 commit 57f1329

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/instructions/github_workflows_yaml.instructions.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ This file contains instructions for working with GitHub Actions YAML files in th
1111

1212
## REQUIREMENTS
1313

14-
- **ALWAYS pin ALL external GitHub Actions to full-length commit SHAs, never to tags or branch names — including GitHub-maintained `actions/*` actions.** Add a trailing comment with the original tag for readability (e.g., `uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6`). To resolve a tag to its commit SHA, run `git ls-remote https://github.com/OWNER/REPO.git refs/tags/TAG` (or `refs/heads/BRANCH` for branch-based refs).
14+
- **ALWAYS pin ALL external GitHub Actions to full-length commit SHAs, never to tags or branch names — including GitHub-maintained `actions/*` actions.** Add a trailing comment with the original tag for readability (e.g., `uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6`). To resolve a tag to its commit SHA, run `git ls-remote https://github.com/OWNER/REPO.git refs/tags/TAG^{}` (or `refs/heads/BRANCH` for branch-based refs).
1515
- ALWAYS use the principle of least privilege, and explicitly set `permissions` for workflows.
1616
- ALWAYS use valid YAML syntax and follow GitHub Actions workflow conventions.
1717
- ALWAYS follow best practices for GitHub Actions workflows including security, efficiency, and maintainability.

0 commit comments

Comments
 (0)