mirror of
https://github.com/llvm/llvm-project.git
synced 2025-04-16 00:26:31 +00:00
4476f7237e
This patch has pins actions in the libc Github workflows. Hash pinning is a best practice as it ensures we are getting an exact action version, which can help with reproducibility/reliability. It additionally alleviates security concerns as an attacker can modify release assets, potentially giving them access to tokens in privileged workflows.