Pin SecLists Versions in CI Pipelines
Consistency matters when comparing scan results.
GitHub Actions snippet
- uses: actions/checkout@v4
- name: Fetch SecLists
run: |
git clone https://github.com/danielmiessler/SecLists.git
cd SecLists
git checkout 2024.3
- name: Cache SecLists
uses: actions/cache@v4
with:
path: SecLists
key: seclists-2024.3
Diagram
flowchart TD A[CI job] --> B[Clone SecLists] B --> C[Checkout commit] C --> D[Cache]
Update the pinned hash during quarterly reviews to incorporate new payloads intentionally.