Compliance: unpinned-actions-test.yml #157

Activity

1. don-petry

   added

   claude

   compliance-auditAutomated compliance audit findingAutomated compliance audit finding

   on May 13, 2026
2. don-petry commented on May 13, 2026

   

   don-petry

   on May 13, 2026

   Last edited by don-petry

   CollaboratorAuthor

   More actions

   Claude finished @don-petry's task in 2m 7s —— View job • claude/issue-157-20260513-1250 • [Create PR ➔](https://github.com/petry-projects/.github-private/compare/main...claude/issue-157-20260513-1250?quick_pull=1&title=Issue%20%23157%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%23157%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)

   ---

   Fixing Compliance Issue: Unpinned Action in test.yml

   • Gather context (CLAUDE.md, workflow file)
   • Look up SHA for actions/checkout@v4 → 34e114876b0b11c390a56381ad16ebd13914f8d5
   • Pin action to SHA in .github/workflows/test.yml
   • Commit and push changes
   • Create pull request → PR #158
   • Self-review PR (change is minimal and correct)
   • CI passed — unit-tests ✅, CodeQL ✅, SonarCloud ✅; tagged @don-petry for review

   The fix pins actions/checkout@v4 to its immutable commit SHA 34e114876b0b11c390a56381ad16ebd13914f8d5 with a # v4 comment for readability. No other actions in test.yml needed pinning.
   | PR #158
3. don-petry

   closed this as completedin #158on May 13, 2026