Kobi Hikri 7e36192034 🔧 Pin mattermost-notify action to its v2.1.0 commit SHA ...

The notify steps referenced mattermost/action-mattermost-notify@master, a
mutable branch that runs in CI with access to the MATTERMOST_WEBHOOK_URL
secret. Pinning to the immutable commit of the latest release (v2.1.0,
ae31bb6) keeps the exact reviewed code from executing, per GitHub third-party
action hardening guidance, while staying easy to bump.

2026-07-16 14:59:08 +02:00

4.3 KiB

Raw Blame History

View Raw