Skip to content

chore: update readme with pin sha in readme#27

Merged
olblak merged 2 commits intoneuvector:mainfrom
pohanhuang:chore/update-readme-align-with-pin-sha-changes
Mar 31, 2026
Merged

chore: update readme with pin sha in readme#27
olblak merged 2 commits intoneuvector:mainfrom
pohanhuang:chore/update-readme-align-with-pin-sha-changes

Conversation

@pohanhuang
Copy link
Copy Markdown
Contributor

@pohanhuang pohanhuang commented Mar 31, 2026

Summary

  • pin sha in readme
  • dc98ca3 is the latest commits for Pin GH action to sha commits

Signed-off-by: pohanhuang <pohan.huang@suse.com>
README.md Outdated
docker build -t registry.organization.com/org/image-name:${{ github.sha }} .
- name: Scan Image
uses: neuvector/scan-action@main
uses: neuvector/scan-action@dc98ca3e206249d47f00d884f04dd9905a94f156
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems like we have releases for this action https://github.com/neuvector/scan-action/releases/tag/1.0.0

Better use 1.0.0 than a commit alone

README.md Outdated
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
- name: Scan Remote Image
uses: neuvector/scan-action@main
uses: neuvector/scan-action@dc98ca3e206249d47f00d884f04dd9905a94f156
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same here

Copy link
Copy Markdown

@olblak olblak left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We shouldn't use github action digest without comment. We should use version when we can

Signed-off-by: pohanhuang <pohan.huang@suse.com>
@pohanhuang pohanhuang requested a review from olblak March 31, 2026 08:38
@olblak olblak merged commit 147d13f into neuvector:main Mar 31, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants