)]}'
{
  "commit": "908b2767004809d9265e154f1cbbee7b4fbff7e0",
  "tree": "c745542afdb04c136619e415cc9c8fbd3741cf46",
  "parents": [
    "dd7148e22c9415b270070ff285fba35694e934b5"
  ],
  "author": {
    "name": "StepSecurity Bot",
    "email": "bot@stepsecurity.io",
    "time": "Wed Apr 26 06:43:41 2023 -0700"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Wed Apr 26 15:43:41 2023 +0200"
  },
  "message": "[StepSecurity] ci: Harden GitHub Actions (#937)\n\n## Summary\r\n\r\nThis pull request is created by [Secure\r\nRepo](https://app.stepsecurity.io/securerepo) at the request of\r\n@guidezpl. Please merge the Pull Request to incorporate the requested\r\nchanges. Please tag @guidezpl on your message if you have any questions\r\nrelated to the PR. You can also engage with the\r\n[StepSecurity](https://github.com/step-security) team by tagging\r\n@step-security-bot.\r\n\r\n\r\n## Security Fixes\r\n\r\n### Pinned Dependencies\r\n\r\nGitHub Action tags and Docker tags are mutatble. This poses a security\r\nrisk. GitHub\u0027s Security Hardening guide recommends pinning actions to\r\nfull length commit.\r\n\r\n- [GitHub Security\r\nGuide](https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions)\r\n- [The Open Source Security Foundation (OpenSSF) Security\r\nGuide](https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies)\r\n\r\n\r\n## Feedback\r\nFor bug reports, feature requests, and general feedback; please create\r\nan issue in\r\n[step-security/secure-repo](https://github.com/step-security/secure-repo).\r\nTo create such PRs, please visit https://app.stepsecurity.io/securerepo.\r\n\r\n\r\nSigned-off-by: StepSecurity Bot \u003cbot@stepsecurity.io\u003e\r\n\r\nSigned-off-by: StepSecurity Bot \u003cbot@stepsecurity.io\u003e",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "e3fe743f4df6d516e8434b23df39fdd19b18eed2",
      "old_mode": 33188,
      "old_path": ".github/workflows/release_deploy_windows.yml",
      "new_id": "bff65fccd02d405eaf2e2954d547d55f6e33167a",
      "new_mode": 33188,
      "new_path": ".github/workflows/release_deploy_windows.yml"
    }
  ]
}