Skip to content

ci: pin the runner image to ubuntu-24.04 - #110

Merged
liquidsec merged 1 commit into
devfrom
chore/pin-actions-sha
Sep 29, 2026
Merged

liquidsec merged 1 commit into
devfrom
chore/pin-actions-sha

Conversation

@singlerider

@singlerider singlerider commented Sep 22, 2026 •

Copy link
Copy Markdown
Contributor

ubuntu-latest is a label GitHub moves. The image behind it changes on GitHub's schedule, and a pipeline nobody touched goes red on a Tuesday. This pins every job to ubuntu-24.04 so the runner moves when we move it.

Action refs are left alone. Version-tagged actions stay on their tags and Dependabot keeps bumping them.

Validation

actionlint clean on the changed workflows. No logic, matrix, or step changes: only the runs-on: value.

Part of https://github.com/blacklanternsecurity/bbot-enterprise/issues/149.

@singlerider
singlerider requested a review from en0f September 28, 2026 18:20
ubuntu-latest is a label GitHub moves. The image changes under us and
a green pipeline turns red on a morning nobody touched the code.
Pinning to ubuntu-24.04 means the runner moves when we move it.

Version-tagged actions are left alone. blasthttp has no action pinned
to a branch, so the runner is the whole change.
@singlerider singlerider changed the title ci: pin every action reference to a commit SHA ci: pin the runner image to ubuntu-24.04 Sep 28, 2026
@liquidsec
liquidsec merged commit 7037dd5 into dev Sep 29, 2026
15 checks passed
@singlerider singlerider self-assigned this Oct 3, 2026
@singlerider
singlerider deleted the chore/pin-actions-sha branch October 3, 2026 11:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants