Skip to content

Compliance: unpinned-actions-repair-pr-approvals.yml #52

Closed

Description

@don-petry

Compliance Finding

Category: action-pinning
Severity: error
Check: unpinned-actions-repair-pr-approvals.yml

Detail

Workflow repair-pr-approvals.yml has 1 action(s) not pinned to SHA: - uses: actions/checkout@v4

Standard Reference

standards/ci-standards.md#action-pinning-policy

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.


This issue was automatically created by the weekly compliance audit.

Activity

  1. don-petry commented on May 8, 2026

    @don-petry
    CollaboratorAuthor

    Claude finished @don-petry's task in 1m 46s —— View job • claude/issue-52-20260508-1409 • [Create PR ➔](https://github.com/petry-projects/.github-private/compare/main...claude/issue-52-20260508-1409?quick_pull=1&title=Issue%20%2352%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%2352%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)


    Fixing unpinned action in repair-pr-approvals.yml

    • Check for existing open PRs for issue Compliance: unpinned-actions-repair-pr-approvals.yml #52
    • Read CLAUDE.md for repo-specific instructions
    • Find and read repair-pr-approvals.yml
    • Look up SHA for actions/checkout@v4
    • Pin the action to its SHA
    • Commit and push changes
    • Create PR and self-review

    Pinned actions/checkout@v4 → actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 in .github/workflows/repair-pr-approvals.yml.

    petry-projects/.github-private#77

  2. don-petry commented on May 11, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-11)

    This finding is still open.

    Detail: Workflow repair-pr-approvals.yml has 1 action(s) not pinned to SHA: - uses: actions/checkout@v4

    Standard: standards/ci-standards.md#action-pinning-policy

  3. don-petry commented on May 12, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Workflow repair-pr-approvals.yml has 1 action(s) not pinned to SHA: - uses: actions/checkout@v4

    Standard: standards/ci-standards.md#action-pinning-policy

  4. don-petry commented on May 12, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Workflow repair-pr-approvals.yml has 1 action(s) not pinned to SHA: - uses: actions/checkout@v4

    Standard: standards/ci-standards.md#action-pinning-policy

  5. don-petry commented on May 12, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Workflow repair-pr-approvals.yml has 1 action(s) not pinned to SHA: - uses: actions/checkout@v4

    Standard: standards/ci-standards.md#action-pinning-policy

  6. don-petry commented on May 12, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Workflow repair-pr-approvals.yml has 1 action(s) not pinned to SHA: - uses: actions/checkout@v4

    Standard: standards/ci-standards.md#action-pinning-policy

  7. don-petry commented on May 12, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Workflow repair-pr-approvals.yml has 1 action(s) not pinned to SHA: - uses: actions/checkout@v4

    Standard: standards/ci-standards.md#action-pinning-policy

  8. don-petry commented on May 13, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-13)

    This finding is still open.

    Detail: Workflow repair-pr-approvals.yml has 1 action(s) not pinned to SHA: - uses: actions/checkout@v4

    Standard: standards/ci-standards.md#action-pinning-policy

  9. don-petry commented on May 15, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-15)

    This finding is still open.

    Detail: Workflow repair-pr-approvals.yml has 1 action(s) not pinned to SHA: - uses: actions/checkout@v6

    Standard: standards/ci-standards.md#action-pinning-policy

  10. 10 remaining items

  11. don-petry commented on May 26, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-26)

    This finding is still open.

    Detail: Workflow repair-pr-approvals.yml has 1 action(s) not pinned to SHA: - uses: actions/checkout@v6.0.2

    Standard: standards/ci-standards.md#action-pinning-policy

  12. don-petry commented on May 29, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-29)

    This finding is still open.

    Detail: Workflow repair-pr-approvals.yml has 1 action(s) not pinned to SHA: - uses: actions/checkout@v6.0.2

    Standard: standards/ci-standards.md#action-pinning-policy

  13. don-petry commented on May 30, 2026

    @don-petry
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-30)

    This finding is still open.

    Detail: Workflow repair-pr-approvals.yml has 1 action(s) not pinned to SHA: - uses: actions/checkout@v6.0.2

    Standard: standards/ci-standards.md#action-pinning-policy

  14. don-petry commented on May 30, 2026

    @don-petry
    CollaboratorAuthor

    @don-petry-dev-lead

  15. don-petry commented on Jun 5, 2026

    @don-petry
    CollaboratorAuthor

    Resolved! This check is now passing as of 2026-06-05. Closing automatically.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    compliance-auditAutomated compliance audit findingdev-leadFor dev-lead agent pickup

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions