Comment on Trivy under attack again: Widespread GitHub Actions tag compromise secretsparentComments−allset_5moEven then, that's only immutable for the workflow config. Many workflows then go on to pull in mutable inputs downstream (eg: default to "latest" version).
Comments
Even then, that's only immutable for the workflow config. Many workflows then go on to pull in mutable inputs downstream (eg: default to "latest" version).