decentraland / atlas-server

41%

LAST BUILD ON BRANCH master

branch: SELECT

CHANGE BRANCH

x

Sync Branches

• No branch selected
• add-ai-agent-context-to-readme
• chore/add-space
• chore/bump-libs
• chore/bump-node
• chore/enhance-docs
• chore/readme-change
• chore/trigger-deploy
• docs/api
• feat/add-release-job
• feat/add-tracing-and-logging
• feat/cache-tiles-s3
• feat/cors
• feat/feature-flag
• feat/improve-atlas-cache
• feat/instrument-http-requests-logger
• feat/migrate-to-new-ci-infra
• feat/redeploy-atlas-server
• feat/sanitize-estates-id
• feat/tiles-with-trades
• feat/trigger-build
• feat/trigger-deploy
• feat/try-to-use-s3
• feat/update-graph-component
• feat/use-node-18-alpine
• fix/add-console-update
• fix/add-last-modified-tests
• fix/estates-trades-not-showing
• fix/expiration-date-lands
• fix/filter-nulled-rental-listings
• fix/no-cache-on-last-updated
• fix/parcel-updated-at
• fix/re-trigger-deployment
• fix/remove-lastModifiedHeader-temporary
• fix/remove-modified-middleware
• fix/remove-old-infra-code
• fix/rental-listing-calculation
• fix/save-metrics-of-all-updates
• fix/small-change
• fix/trigger-redeployment
• fix/udpdate-deps
• fix/ulimit
• fix/update-dep
• fix/update-rentals-with-milliseconds
• fix/update-schemas
• fix/updated-at-calculation-ms
• fix/use-seconds
• fix/workflow
• fzavalia-patch-1
• master
• refs/heads/master
• refs/tags/1.0.0
• refs/tags/1.0.1
• refs/tags/1.1.0
• refs/tags/1.13.17
• refs/tags/1.2.0
• refs/tags/1.2.1
• refs/tags/1.3.0
• refs/tags/1.3.1
• refs/tags/1.3.10
• refs/tags/1.3.11
• refs/tags/1.3.12
• refs/tags/1.3.13
• refs/tags/1.3.14
• refs/tags/1.3.15
• refs/tags/1.3.16
• refs/tags/1.3.18
• refs/tags/1.3.19
• refs/tags/1.3.2
• refs/tags/1.3.3
• refs/tags/1.3.4
• refs/tags/1.3.5
• refs/tags/1.3.6
• refs/tags/1.3.7
• refs/tags/1.3.8
• refs/tags/1.3.9
• refs/tags/1.4.0
• refs/tags/1.4.1
• refs/tags/1.5.0
• refs/tags/1.5.1
• refs/tags/1.5.2
• security/pin-github-actions-sha

Build # 26044731158

Build Type

push

github

Committed by web-flow

Commit Message

ci: pin third-party GitHub Actions to commit SHAs (#134)

## Summary

Pin mutable branch reference (`@master`) on third-party GitHub Actions
to an immutable commit SHA, preventing supply chain attacks if a
third-party maintainer account is compromised.

**Actions pinned:**
- `coverallsapp/github-action@master` → `@09b709cf`

The SHA comment preserves the original human-readable reference.

Requested by Ignacio Mazzara via Slack

---------

Signed-off-by: Gabriel Díaz <git@subsme.slmail.me>
Co-authored-by: Gabriel Díaz <git@subsme.slmail.me>

Coverage Stats

298 of 414 branches covered (71.98%)

Branch coverage included in aggregate %.

1485 of 3886 relevant lines covered (38.21%)

11.42 hits per line