Skip to content

Conversation

woodruffw
Copy link
Member

@woodruffw woodruffw commented Apr 22, 2025

Switches to requirements/%.{in,txt} and uses uv pip compile to manage them.

Also uses frizebee actions to hash-pin all of our CI/CD actions references.

Signed-off-by: William Woodruff <william@trailofbits.com>
@woodruffw woodruffw self-assigned this Apr 22, 2025
Signed-off-by: William Woodruff <william@trailofbits.com>
Signed-off-by: William Woodruff <william@trailofbits.com>
Signed-off-by: William Woodruff <william@trailofbits.com>
@woodruffw woodruffw requested review from di, bobcallaway and jku April 22, 2025 19:13
@woodruffw woodruffw added the dependencies Pull requests that update a dependency file label Apr 22, 2025
@woodruffw woodruffw merged commit ee10b53 into main Apr 22, 2025
31 checks passed
@woodruffw woodruffw deleted the ww/hash-pinning branch April 22, 2025 20:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants