Skip to content

fix(ci): harden GitHub Actions workflows (#14550) - #14851

Merged
paulinebm merged 1 commit into
diffusers-cli-cuda-dockerfrom
security/workflow-hardening/pr-14550
Sep 23, 2026
Merged

paulinebm merged 1 commit into
diffusers-cli-cuda-dockerfrom
security/workflow-hardening/pr-14550

Conversation

@hf-security-analysis

@hf-security-analysis hf-security-analysis Bot commented Sep 23, 2026 •

Copy link
Copy Markdown
Contributor

Automated hardening of the workflow files flagged on #14550.

Targets diffusers-cli-cuda-docker. Files changed, and what changed them:

  • .github/workflows/build_docker_images.yml — action pins

Fixed by this PR:

  • HIGH unpinned-action (pinact) — .github/workflows/build_docker_images.yml:34
  • HIGH unpinned-action (pinact) — .github/workflows/build_docker_images.yml:112
  • HIGH unpinned-action (pinact) — .github/workflows/build_docker_images.yml:114
  • HIGH unpinned-action (pinact) — .github/workflows/build_docker_images.yml:119

Pinning changes come from pinact and are mechanical. Any other change was generated by Claude — read it before merging.

@github-actions github-actions Bot added size/S PR with diff < 50 LOC CI and removed size/S PR with diff < 50 LOC labels Sep 23, 2026
@paulinebm
paulinebm merged commit 9f4e57c into diffusers-cli-cuda-docker Sep 23, 2026
5 checks passed
@paulinebm
paulinebm deleted the security/workflow-hardening/pr-14550 branch September 23, 2026 08:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant