Archives
/
fzf
mirror of https://github.com/junegunn/fzf
2
0
Fork 0
Code Issues Projects Releases Wiki Activity
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
master
dependabot/github_actions/crate-ci/typos-1.24.6
history-highlighted
devel
v0.55.0
v0.54.3
v0.54.2
v0.54.1
v0.54.0
0.53.0
0.52.1
0.52.0
0.51.0
0.50.0
0.49.0
0.48.1
0.48.0
0.47.0
0.46.1
0.46.0
0.45.0
0.44.1
0.44.0
0.43.0
0.42.0
0.41.1
0.41.0
0.40.0
0.39.0
0.38.0
0.37.0
0.36.0
0.35.1
0.35.0
0.34.0
0.33.0
0.32.1
0.32.0
0.31.0
0.30.0
0.29.0
0.28.0
0.27.3
0.27.2
0.27.1
0.27.0
0.26.0
0.25.1
0.25.0
0.24.4
0.24.3
0.24.2
0.24.1
0.24.0-1
0.24.0
0.24.0-rc1
0.23.1
0.23.0
0.22.0
0.21.1
0.21.0-1
0.21.0
0.20.0
0.19.0
0.18.0
0.17.5
0.17.4
0.17.3
0.17.1
0.17.0-2
0.17.0
0.16.11
0.16.10
0.16.9
0.16.8
0.16.7
0.16.6
0.16.5
0.16.4
0.16.3
0.16.2
0.16.1
0.16.0
0.15.9
0.15.8
0.15.7
0.15.6
0.15.5
0.15.4
0.15.3
0.15.2
0.15.1
0.15.0
0.13.5
0.13.4
0.13.3
0.13.2
0.13.1
0.13.0
0.12.2
0.12.1
0.11.2
0.10.6
0.10.5
0.10.0
0.9.12
0.9.11
0.9.10
0.9.7-1
0.9.7
0.9.4-1
0.9.4
0.9.3
0.9.2
0.9.1
0.9.0
0.8.9
0.8.8
0.8.7
0.8.6
0.8.5
0.8.4
0.1.0
0.10.1
0.10.2
0.10.3
0.10.4
0.10.7
0.10.8
0.10.9
0.11.0
0.11.1
0.11.3
0.11.4
0.12.0
0.3.1
0.4.0
0.4.2
0.5.0
0.5.1
0.6.0
0.7.0
0.7.1
0.8.0
0.8.1
0.8.2
0.8.3
0.9.13
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '19af8fc7d8'
${ noResults }
fzf/.github
History
Naveen 19af8fc7d8
Pin actions to a full length commit SHA (#2765) 
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

>Pin actions to a full length commit SHA

>Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload.

https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions

Also, dependabot supports upgrade based on SHA.

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>s
 		3 years ago
..
workflows Pin actions to a full length commit SHA (#2765) 3 years ago
FUNDING.yml Update FUNDING.yml 4 years ago
ISSUE_TEMPLATE.md fix spelling 3 years ago
dependabot.yml Add dependabot config for dependency updates (#2573) 3 years ago