diff --git a/.github/workflows/pr-actions.yaml b/.github/workflows/pr-actions.yaml deleted file mode 100644 index 6d0b24b2..00000000 --- a/.github/workflows/pr-actions.yaml +++ /dev/null @@ -1,27 +0,0 @@ -name: pr-actions - -permissions: {} - -on: - pull_request: - branches: - - 'master' - -jobs: - ensure-sha-pinned: - runs-on: ubuntu-latest - steps: - - name: Harden Runner - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 - with: - egress-policy: audit - - - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - name: Ensure SHA pinned actions - uses: zgosalvez/github-actions-ensure-sha-pinned-actions@c5fc58bd0be7a4b94b73ce40250322d5b838a108 # v5.0.7 - with: - # slsa-github-generator requires using a semver tag for reusable workflows. - # See: https://github.com/slsa-framework/slsa-github-generator#referencing-slsa-builders-and-generators - allowlist: | - slsa-framework/slsa-github-generator