Skip to content

Commit 8c75c61

Browse files
committed
Pin Rust toolchain action to specific commit SHA for security
Use dtolnay/rust-toolchain@efa25f7 instead of @stable to follow GitHub Actions security best practices of pinning third-party actions to immutable commit SHAs.
1 parent 3cc1e24 commit 8c75c61

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/test-python.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,7 +83,7 @@ jobs:
8383
python-version: ${{ matrix.python-version }}
8484
- name: Install Rust toolchain
8585
if: matrix.extension == 'rust'
86-
uses: dtolnay/rust-toolchain@stable
86+
uses: dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9 # stable
8787
- id: setup-mongodb
8888
uses: mongodb-labs/drivers-evergreen-tools@master
8989
with:

0 commit comments

Comments
 (0)