-
Notifications
You must be signed in to change notification settings - Fork 0
feat: Add ASTRO farmework preset option #110
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
09b4287
50680b3
4994f48
57d66dc
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
|
|
@@ -13,3 +13,6 @@ jobs: | |||||
| SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} | ||||||
| with: | ||||||
| args: --all-projects --fail-on=all | ||||||
| json: true | ||||||
| continue-on-error: true | ||||||
|
||||||
| continue-on-error: true | |
| continue-on-error: false |
Copilot
AI
Mar 12, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The workflow uses contentstack/sca-policy@main. For supply-chain security and reproducibility, pin this action to a tagged release or (preferably) a full commit SHA instead of a moving branch ref.
| - uses: contentstack/sca-policy@main | |
| - uses: contentstack/sca-policy@v1 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Checking out
ref: 'main'here makes the later commit step depend on whatevermainpoints to at execution time (it may advance after the workflow was triggered). To keep the release metadata commit consistent with the published version, consider checking out the triggering ref/SHA (e.g.,${{ github.sha }}/${{ github.ref }}) unless you explicitly want to write to the latestmain.