CybercentreCanada/howler

Replace third-party github actions

Open

#39 建立於 2025年7月7日

在 GitHub 查看
 (0 留言) (0 反應) (0 負責人)Python (12 fork)auto 404
enhancementhelp wanted

倉庫指標

Star
 (51 star)
PR 合併指標
 (PR 指標待抓取)

描述

We currently use a number of third-party github actions that could lead to supply chain attacks. Removing these third-party dependencies eliminates that risk.

The current third party action list:

  • abatilo/actions-poetry@v4 - Poetry installation and configuration on buildhost
  • marocchino/sticky-pull-request-comment@v2 - Posting and updating sticky comments in pull requests (Not used when building packages/images, only PRs)
  • hoverkraft-tech/compose-action@v2.2.0 - used for handling docker compose initialization and cleanup

貢獻者指南