flutter_flutter/.github/workflows/content-aware-hash.yml
StepSecurity Bot d53693fb58
Fix GitHub Actions not pinned by hash (#178917)
Use explicit pinned dependencies per:
- [The Open Source Security Foundation (OpenSSF) Security
Guide](https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies)

This pull request is created by
[StepSecurity](https://app.stepsecurity.io/securerepo) at the request of
@guidezpl. Please merge the Pull Request to incorporate the requested
changes.

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: Pierre-Louis <plg@google.com>
Co-authored-by: Zachary Anderson <zanderso@users.noreply.github.com>
2025-11-28 18:44:11 +00:00

24 lines
873 B
YAML

# Copyright 2013 The Flutter Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
name: Generate a content aware hash for the Flutter Engine
on: workflow_dispatch
jobs:
generate-engine-content-hash:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
- name: Generate Hash
run: |
# Script updated to handle gh-readonly-queue/ branches
engine_content_hash=$(bin/internal/content_aware_hash.sh)
# test notice annotation for retrival from api
echo "::notice ::{\"engine_content_hash\": \"${engine_content_hash}\"}"
# test summary writing
echo "{\"engine_content_hash\": \"${engine_content_hash}\"" >> $GITHUB_STEP_SUMMARY