Compliance: unpinned-actions-agent-shield.yml #114

Activity

1. don-petry

   added

   claude

   compliance-auditAutomated compliance audit findingAutomated compliance audit finding

   on May 11, 2026
2. donpetry-bot commented on May 11, 2026

   

   donpetry-bot

   on May 11, 2026

   Last edited by donpetry-bot

   Contributor

   More actions

   Claude finished @don-petry's task in 1m 25s —— View job • claude/issue-114-20260511-1236 • [Create PR ➔](https://github.com/petry-projects/.github-private/compare/main...claude/issue-114-20260511-1236?quick_pull=1&title=Issue%20%23114%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%23114%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)

   ---

   Fixing Unpinned Action in agent-shield.yml

   • Check for existing PRs for this issue — none found
   • Read CLAUDE.md for repo-specific instructions — no CLAUDE.md present
   • Read current agent-shield.yml workflow
   • Check template at petry-projects/.github/standards/workflows/agent-shield.yml
   • Look up SHA for the v1 tag in petry-projects/.github → 0cb4bba11d7563bf197ad805f12fb8639e4879e4
   • Update workflow to pin action to SHA
   • Commit and push changes
   • Create pull request
   • Tag code owners for review

   Summary

   Changed .github/workflows/agent-shield.yml line 33:

   -    uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1
   +    uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@0cb4bba11d7563bf197ad805f12fb8639e4879e4 # v1

   The SHA was resolved by looking up the v1 tag in petry-projects/.github. The # v1 comment is retained for readability, and the repo-specific with: required-files: AGENTS.md input is preserved.

   Pull Request #121 |
3. don-petry

   added

   claude

   and removed

   claude

   on May 11, 2026
4. don-petry commented on May 11, 2026

   

   don-petry

   on May 11, 2026

   Last edited by don-petry

   CollaboratorAuthor

   More actions

   Claude finished @don-petry's task in 1m 50s —— View job • claude/issue-114-20260511-2018 • [Create PR ➔](https://github.com/petry-projects/.github-private/compare/main...claude/issue-114-20260511-2018?quick_pull=1&title=Issue%20%23114%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%23114%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)

   ---

   Fixing Unpinned Action in agent-shield.yml

   • Check for existing PRs for this issue — PR ci: pin agent-shield reusable workflow to SHA #121 was closed without merging
   • Read CLAUDE.md for repo-specific instructions — no CLAUDE.md present
   • Read current agent-shield.yml workflow — still had @v1 (unpinned)
   • Fetch the standards template for agent-shield.yml
   • Look up SHA for the v1 tag in petry-projects/.github → 0cb4bba11d7563bf197ad805f12fb8639e4879e4
   • Update workflow to pin action to SHA
   • Commit and push changes
   • Create pull request — PR #128
   • Self-review PR — single-line diff, correct SHA, # v1 comment retained, repo-specific with: input preserved
   • Tag code owners — tagged @petry-projects/org-leads on the PR

   Summary

   Changed .github/workflows/agent-shield.yml line 33:

   -    uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1
   +    uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@0cb4bba11d7563bf197ad805f12fb8639e4879e4 # v1

   The SHA was resolved from the v1 tag in petry-projects/.github. The # v1 comment is retained for readability, and the repo-specific with: required-files: AGENTS.md input is preserved.

   PR #128 | | claude/issue-114-20260511-2018
5. donpetry-bot

   closed this as completedin #128on May 11, 2026
6. donpetry-bot

   added a commit that references this issue on May 11, 2026

   ci: pin agent-shield reusable workflow to SHA (#128)

   ...

   This issue will close once commit dde4dcb is merged into the 'main' branch.

   dde4dcb
7. don-petry

   added 6 commits that reference this issue on Jun 7, 2026

   ci: pin agent-shield reusable workflow to SHA (#128)

   ...

   This issue will close once commit b629ff6 is merged into the 'main' branch.

   b629ff6

   ci: pin agent-shield reusable workflow to SHA (#128)

   ...

   This issue will close once commit 8a636bb is merged into the 'main' branch.

   8a636bb

   ci: pin agent-shield reusable workflow to SHA (#128)

   ...

   This issue will close once commit a32b562 is merged into the 'main' branch.

   a32b562

   ci: pin agent-shield reusable workflow to SHA (#128)

   ...

   This issue will close once commit 8d4d817 is merged into the 'main' branch.

   8d4d817

   ci: pin agent-shield reusable workflow to SHA (#128)

   ...

   This issue will close once commit 92bfe41 is merged into the 'main' branch.

   92bfe41

   ci: pin agent-shield reusable workflow to SHA (#128)

   ...

   This issue will close once commit 9dc3c11 is merged into the 'main' branch.

   9dc3c11