Skip to content

ci: pin GitHub Actions to commits#547

Merged
zhongkechen merged 2 commits into
mainfrom
codex/pin-github-actions
Jul 17, 2026
Merged

ci: pin GitHub Actions to commits#547
zhongkechen merged 2 commits into
mainfrom
codex/pin-github-actions

Conversation

@zhongkechen

Copy link
Copy Markdown
Contributor

Summary

  • pin all nine remaining mutable GitHub Action tags to full commit SHAs
  • retain version comments for Dependabot updates and reviewer context
  • cover the cloud test and testing SDK image release workflows

Validation

  • parsed every workflow YAML file
  • verified every external action reference uses a full 40-character commit SHA
  • ran git diff --check
  • ran hatch run python .github/scripts/lintcommit.py

Closes #445

@zhongkechen zhongkechen self-assigned this Jul 17, 2026
@zhongkechen
zhongkechen requested a review from a team July 17, 2026 20:01
@zhongkechen
zhongkechen merged commit 72f1fd5 into main Jul 17, 2026
12 checks passed
@zhongkechen
zhongkechen deleted the codex/pin-github-actions branch July 17, 2026 21:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Testing] Governance: replace gh actions versions with pinned sha and add dependabot config

2 participants