Skip to content

Compliance: unpinned-actions-claude.yml #135

Closed

Description

@don-petry

Compliance Finding

Category: action-pinning
Severity: error
Check: unpinned-actions-claude.yml

Detail

Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@v1

Standard Reference

standards/ci-standards.md#action-pinning-policy

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.


This issue was automatically created by the weekly compliance audit.

Activity

  1. don-petry commented on May 12, 2026

    @don-petry
    CollaboratorAuthor

    Claude encountered an error —— View job


    I'll analyze this and get back to you.

  2. don-petry commented on May 12, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  3. don-petry commented on May 12, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  4. don-petry commented on May 12, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  5. don-petry commented on May 12, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  6. don-petry commented on May 13, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-13)

    This finding is still open.

    Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  7. don-petry commented on May 15, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-15)

    This finding is still open.

    Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@v2

    Standard: standards/ci-standards.md#action-pinning-policy

  8. 41 remaining items

  9. added 14 commits that reference this issue on Aug 7, 2026
  10. added a commit that references this issue on Aug 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    compliance-auditAutomated compliance audit finding

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions