Skip to content

ci: pin third-party GitHub Actions by commit SHA#29

Merged
davidpoblador merged 1 commit intomainfrom
pin-actions-sha
Apr 4, 2026
Merged

ci: pin third-party GitHub Actions by commit SHA#29
davidpoblador merged 1 commit intomainfrom
pin-actions-sha

Conversation

@davidpoblador
Copy link
Copy Markdown
Member

Summary

  • Pin all third-party GitHub Actions to their commit SHAs with version comments for readability
  • Covers all 6 unique actions across release.yml, claude.yml, and claude-code-review.yml
  • Renovate's config:recommended already includes helpers:pinGitHubActionDigests, so future updates will maintain SHA pinning

Closes #25

Test plan

  • Verify workflow YAML is valid (no syntax errors)
  • Confirm SHAs match the expected version tags

🤖 Generated with Claude Code

Closes #25

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@davidpoblador davidpoblador merged commit 33c9f39 into main Apr 4, 2026
1 check failed
@davidpoblador davidpoblador deleted the pin-actions-sha branch April 4, 2026 22:38
davidpoblador added a commit that referenced this pull request Apr 5, 2026
davidpoblador added a commit that referenced this pull request Apr 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Pin third-party GitHub Actions by commit SHA

1 participant