{"description":"2025\u5e748\u670815\u65e5\u306b GitHub Actions \u3067\u300c\u7279\u5b9a\u306e\u30a2\u30af\u30b7\u30e7\u30f3\u3084\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u30d6\u30ed\u30c3\u30af\u3059\u308b\u6a5f\u80fd\u300d\u3068\u300c\u30a2\u30af\u30b7\u30e7\u30f3\u306e SHA \u56fa\u5b9a\u3092\u5f37\u5236\u3059\u308b\u6a5f\u80fd\u300d\u304c\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u305f\ud83d\udca1 github.blog \u305f\u3068\u3048\u3070 GitHub Actions \u3067\u4f7f\u3063\u3066\u3044\u308b\u30a2\u30af\u30b7\u30e7\u30f3\u306b\u30d0\u30c3\u30af\u30c9\u30a2\u7684\u306a\u8106\u5f31\u6027\u304c\u7d44\u307f\u8fbc\u307e\u308c\u3066\u3057\u307e\u3063\u305f\u5834\u5408\u306e\u30ea\u30b9\u30af\u3092\u6291\u5236\u3067\u304d\u308b\uff0e\u4eca\u5e74\u3060\u3068 tj-actions/changed-files \u306e\u4ef6\u304c\u3042\u3063\u305f\u308a\u3057\u305f\uff0e nvd.nist.gov \u500b\u4eba\u7684\u306b\u300c\u30a2\u30af\u30b7\u30e7\u30f3\u306e SHA \u56fa\u5b9a\u3092\u5f37\u5236\u3059\u308b\u6a5f\u80fd (Enforce SHA pinning)\u300d\u306b\u8208\u5473\u304c\u3042\u3063\u3066\u3055\u3063\u305d\u304f\u8a66\u3057\u3066\u307f\u305f\u2757\ufe0f\u4eca\u56de\u306f\u30b5\u30f3\u30d7\u30eb\u3068\u3057\u3066 actio\u2026","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fkakakakakku.hatenablog.com%2Fentry%2F2025%2F08%2F25%2F080819\" title=\"GitHub Actions \u3067\u30a2\u30af\u30b7\u30e7\u30f3\u306e SHA \u56fa\u5b9a\u3092\u5f37\u5236\u3067\u304d\u308b\u300cEnforce SHA pinning\u300d - kakakakakku blog\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_title":"kakakakakku blog","blog_url":"https://kakakakakku.hatenablog.com/","author_url":"https://blog.hatena.ne.jp/kakku22/","image_url":"https://cdn-ak.f.st-hatena.com/images/fotolife/k/kakku22/20250822/20250822212734.png","width":"100%","published":"2025-08-25 08:08:19","type":"rich","provider_name":"Hatena Blog","author_name":"kakku22","url":"https://kakakakakku.hatenablog.com/entry/2025/08/25/080819","categories":["GitHub"],"version":"1.0","provider_url":"https://hatena.blog","height":"190","title":"GitHub Actions \u3067\u30a2\u30af\u30b7\u30e7\u30f3\u306e SHA \u56fa\u5b9a\u3092\u5f37\u5236\u3067\u304d\u308b\u300cEnforce SHA pinning\u300d"}