Tushar Pagar and Tushar Pagar
b7f6981d25
ci: bump lock-threads to v6 so the scheduled lock job can run ( #13693 )
...
The pinned version validates its github-token input with a 100 character
cap, and the Actions token now exceeds that, so every run fails before
locking anything:
##[error]"github-token" length must be less than or equal to 100 characters long
v6 raised the cap to 1000 (v4 and v5.0.x both still validate max(100)).
Every input this workflow passes exists unchanged in the v6 schema, so the
pin bump is the whole fix. Pinned to the v6.0.2 release commit.
Co-authored-by: Tushar Pagar <[email protected]
2026-10-13 13:46:38 +05:30
Wilken Rivera
5e043ab3a0
Bump required actions to address Node.js 16 deprecation issue ( #12958 )
...
* Bump required actions to address Node.js 16 deprecation issue
* Update all tsccr approved actions
```shell
tsccr-helper gha update -latest .
```
2024-05-07 12:59:45 -04:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
0194d839b0
Result of tsccr-helper -log-level=info -pin-all-workflows . ( #12507 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2023-07-19 13:20:14 -04:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
3ac1179841
Result of tsccr-helper -pin-all-workflows . ( #12381 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2023-04-27 14:55:22 -04:00
dependabot[bot]
7c498d7217
build(deps): bump dessant/lock-threads from 3 to 4 ( #12145 )
...
Bumps [dessant/lock-threads](https://github.com/dessant/lock-threads ) from 3 to 4.
- [Release notes](https://github.com/dessant/lock-threads/releases )
- [Changelog](https://github.com/dessant/lock-threads/blob/master/CHANGELOG.md )
- [Commits](https://github.com/dessant/lock-threads/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: dessant/lock-threads
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] [email protected]
2022-12-08 07:31:51 -05:00
Wilken Rivera and neilnaveen
cc5898022a
update action permissions ( #11837 )
...
* chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
Signed-off-by: neilnaveen <[email protected] [email protected]
2022-06-14 12:08:39 -04:00
dependabot[bot] and Wilken Rivera
01483c4d72
Bump dessant/lock-threads from 2 to 3 ( #11293 )
...
* Bump dessant/lock-threads from 2 to 3
Bumps [dessant/lock-threads](https://github.com/dessant/lock-threads ) from 2 to 3.
- [Release notes](https://github.com/dessant/lock-threads/releases )
- [Changelog](https://github.com/dessant/lock-threads/blob/master/CHANGELOG.md )
- [Commits](https://github.com/dessant/lock-threads/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: dessant/lock-threads
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] [email protected]
2021-10-04 10:30:58 -04:00
Wilken Rivera
488e6d80aa
.github/workflows/lock.yml: Fix ISO 8601 date format
2021-05-27 13:50:05 -04:00
Wilken Rivera
0a05b834d7
remove hashibot ( #11053 )
...
* Replace `closed_issue_locker` HashiBot action with GitHub action
Related to: #11043
* Replace with GitHub action
* Replace with GitHub action
2021-05-27 12:58:58 -04:00
Tushar PagarandTushar Pagar
Wilken Rivera
hashicorp-tsccr[bot]andhashicorp-tsccr[bot]
dependabot[bot]
