Skip to content

fix: capture re-usable workflows as actions instead of scripts#1374

Merged
Ron (rjaegers) merged 10 commits into
mainfrom
fix/package-scripts-as-actions
Jul 22, 2026
Merged

fix: capture re-usable workflows as actions instead of scripts#1374
Ron (rjaegers) merged 10 commits into
mainfrom
fix/package-scripts-as-actions

fix: capture re-usable workflows as actions instead of scripts

6934e07
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / SonarCloud failed Jul 21, 2026 in 5s

3 new alerts including 2 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 high
  • 1 medium

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 108 in .github/workflows/wc-build-push.yml

See this annotation in the file changed.

Code scanning / SonarCloud

External GitHub Actions and workflows should be pinned to a commit hash High

Use full commit SHA hash for this dependency. See more on SonarQube Cloud

Check failure on line 288 in .github/workflows/wc-build-push.yml

See this annotation in the file changed.

Code scanning / SonarCloud

External GitHub Actions and workflows should be pinned to a commit hash High

Use full commit SHA hash for this dependency. See more on SonarQube Cloud

Check warning on line 255 in .github/workflows/wc-build-push.yml

See this annotation in the file changed.

Code scanning / SonarCloud

HTTPS should be enforced on HTTP clients following redirects Medium

Not disabling redirects might allow for redirections to insecure websites. Make sure it is safe here. See more on SonarQube Cloud