-
Notifications
You must be signed in to change notification settings - Fork 39
pin run-gemini-cli gha to v0.1.20 #134
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
Note Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported. |
|
🤖 Hi @QuanZhang-William, I've received your request, and I'm working on it now! You can track my progress in the logs for more details. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This pull request pins the version of the run-gemini-cli GitHub Action. This is a good practice for ensuring workflow stability and security. The review identified a potential typo in the specified version number.
🔍 General Feedback
- Pinning GitHub Actions to a specific version is a great security best practice.
- There's a version mismatch between the PR description and the code. Please ensure the correct version is used.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This pull request improves the security of the CI/CD pipeline by pinning the version of the run-gemini-cli GitHub Action. This is a recommended security practice to prevent supply chain attacks. The changes are beneficial and do not introduce any security vulnerabilities.
🔍 General Feedback
- No security vulnerabilities were found in this pull request.
- Pinning GitHub Actions to a specific version is a great security practice.
|
Part of #133. |
Currently, the workflow example points to the floating
@mainversion ofrun-gemini-cliGHA.This commit updates the example to point to the pinned version of it (v0.1.20) for best practice.