Bump golangci/golangci-lint-action from 6 to 7 #52
Conversation
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6 to 7. - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](golangci/golangci-lint-action@v6...v7) --- updated-dependencies: - dependency-name: golangci/golangci-lint-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #52 +/- ##
=======================================
Coverage 38.88% 38.88%
=======================================
Files 2 2
Lines 90 90
=======================================
Hits 35 35
Misses 55 55 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
|
Caution Review failedThe pull request is closed. WalkthroughThe pull request updates the GitHub Actions workflow configuration by changing the referenced version of the Changes
Possibly related PRs
Poem
📜 Recent review detailsConfiguration used: CodeRabbit UI 📒 Files selected for processing (1)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| go-version: 'stable' | ||
| - name: golangci-lint | ||
| uses: golangci/golangci-lint-action@v6 | ||
| uses: golangci/golangci-lint-action@v7 |
Check warning
Code scanning / Semgrep (reported by Codacy)
An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Warning
alessio
deleted the
dependabot/github_actions/golangci/golangci-lint-action-7
branch
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 0
🧹 Nitpick comments (1)
.github/workflows/golangci-lint.yml (1)
23-23: Action version updated, but consider immutable pinning.The update to
golangci/golangci-lint-action@v7correctly meets the PR objective. However, static analysis recommends pinning third-party actions to a full-length commit SHA to ensure immutability and enhance security. While using version tags likev7is common for simplicity, it may lead to unanticipated changes if a new commit is pushed under that tag.🧰 Tools
🪛 GitHub Check: Semgrep (reported by Codacy)
[warning] 23-23:
An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release.
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
📒 Files selected for processing (1)
.github/workflows/golangci-lint.yml(1 hunks)
🧰 Additional context used
🪛 GitHub Check: Semgrep (reported by Codacy)
.github/workflows/golangci-lint.yml
[warning] 23-23:
An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release.
1 participant
Bumps golangci/golangci-lint-action from 6 to 7.
updated-dependencies:
Summary by CodeRabbit