Skip to content

Compliance: unpinned-actions-auto-rebase.yml #115

Closed

Description

@don-petry

Compliance Finding

Category: action-pinning
Severity: error
Check: unpinned-actions-auto-rebase.yml

Detail

Workflow auto-rebase.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/auto-rebase-reusable.yml@v1

Standard Reference

standards/ci-standards.md#action-pinning-policy

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.


This issue was automatically created by the weekly compliance audit.

Activity

  1. donpetry-bot commented on May 11, 2026

    @donpetry-bot
    Contributor

    Claude finished @don-petry's task in 1m 18s —— View job • claude/issue-115-20260511-1236 • [Create PR ➔](https://github.com/petry-projects/.github-private/compare/main...claude/issue-115-20260511-1236?quick_pull=1&title=Issue%20%23115%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%23115%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)


    Fixing unpinned action in auto-rebase.yml

    • Check for existing PRs for this issue
    • Read CLAUDE.md / AGENTS.md for repo-specific guidelines
    • Read current auto-rebase.yml
    • Look up SHA for the v1 tag in petry-projects/.github
    • Pin the action to its SHA (0cb4bba11d7563bf197ad805f12fb8639e4879e4)
    • Commit and push changes
    • Create PR and tag code owners

    Pinned auto-rebase-reusable.yml from @v1 to commit SHA 0cb4bba11d7563bf197ad805f12fb8639e4879e4 (verified via gh api). PR is open and @petry-projects/org-leads has been tagged for review.

    PR #120 |

  2. don-petry commented on May 11, 2026

    @don-petry
    CollaboratorAuthor

    Claude finished @don-petry's task in 1m 32s —— View job • claude/issue-115-20260511-2018 • [Create PR ➔](https://github.com/petry-projects/.github-private/compare/main...claude/issue-115-20260511-2018?quick_pull=1&title=Issue%20%23115%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%23115%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)


    Fixing unpinned action in auto-rebase.yml

    • Check for existing PRs and current state of auto-rebase.yml — PR ci: pin auto-rebase-reusable.yml to SHA (fixes #115) #120 was closed without merging; fix still needed
    • Read CLAUDE.md / AGENTS.md for repo-specific guidelines
    • Look up SHA for the v1 tag in petry-projects/.github — 0cb4bba11d7563bf197ad805f12fb8639e4879e4
    • Pin the action to its SHA
    • Commit and push changes
    • Create PR and tag code owners

    Pinned auto-rebase-reusable.yml from @v1 to commit SHA 0cb4bba11d7563bf197ad805f12fb8639e4879e4 (SHA confirmed via gh api). PR opened and @petry-projects/org-leads tagged for review.

    PR #127 |

  3. added a commit that references this issue on May 11, 2026
    6bafc6a
  4. added 6 commits that reference this issue on Jun 7, 2026
    ef1ed72
    936fbbb
    e395437
    0b28019
    cdf3276
    c1d58a3
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    compliance-auditAutomated compliance audit finding

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions