mirror of
https://github.com/spf13/cobra
synced 2025-05-07 22:07:23 +00:00
add comment calling out need to check if we change version
if we are to bump this version then we should re-evaluate if there are any leaks or exploits in the actions implementation https://github.com/spf13/cobra/pull/1097\#issuecomment-620877596
This commit is contained in:
parent
3f58c14b11
commit
c254a57593
1 changed files with 3 additions and 0 deletions
3
.github/workflows/periodic-labeler.yml
vendored
3
.github/workflows/periodic-labeler.yml
vendored
|
@ -7,6 +7,9 @@ jobs:
|
||||||
labeler:
|
labeler:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
|
# if we are to change the labeler version from v0.0.2
|
||||||
|
# we must review the code for that version
|
||||||
|
# to make sure there are no leaks or exploits
|
||||||
- uses: paulfantom/periodic-labeler@v0.0.2
|
- uses: paulfantom/periodic-labeler@v0.0.2
|
||||||
env:
|
env:
|
||||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||||
|
|
Loading…
Add table
Reference in a new issue