From e8ee798ffaa5a7f303f6af7ffb0a5cb956932222 Mon Sep 17 00:00:00 2001 From: Kylie Stradley <4666485+KyFaSt@users.noreply.github.com> Date: Thu, 7 Nov 2024 15:29:28 -0500 Subject: [PATCH] add temporary immutable actions doc page --- ql/src/Security/CWE-829/UnversionedImmutableAction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ql/src/Security/CWE-829/UnversionedImmutableAction.md b/ql/src/Security/CWE-829/UnversionedImmutableAction.md index 754fe75b62b..33701ec27e6 100644 --- a/ql/src/Security/CWE-829/UnversionedImmutableAction.md +++ b/ql/src/Security/CWE-829/UnversionedImmutableAction.md @@ -7,7 +7,7 @@ of the action stored in the GitHub package registry. The action code will not ch ## Recommendations -When using [immutable actions]() use the full semantic version of the action. This will ensure that the action is resolved to the exact version stored in the GitHub package registry. This will prevent the action code from changing between runs. +When using [immutable actions](https://github.com/github/package-registry-team/blob/main/docs/immutable-actions/immutable-actions-howto.md) use the full semantic version of the action. This will ensure that the action is resolved to the exact version stored in the GitHub package registry. This will prevent the action code from changing between runs. ## Examples