Compliance: unpinned-actions-claude.yml #105

Activity

1. don-petry

   added

   compliance-auditAutomated compliance audit findingAutomated compliance audit finding

   on Apr 9, 2026
2. don-petry commented on Apr 9, 2026

   

   don-petry

   on Apr 9, 2026

   ContributorAuthor

   More actions

   Weekly Compliance Audit (2026-04-09)

   This finding is still open.

   Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@main

   Standard: standards/ci-standards.md#action-pinning-policy
3. don-petry

   added

   claude

   on Apr 9, 2026
4. don-petry commented on Apr 9, 2026

   

   don-petry

   on Apr 9, 2026

   Last edited by don-petry

   ContributorAuthor

   More actions

   Claude encountered an error —— View job • claude/issue-105-20260409-1711 • [Create PR ➔](https://github.com/petry-projects/.github/compare/main...claude/issue-105-20260409-1711?quick_pull=1&title=Issue%20%23105%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%23105%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)

   ---

   Fixing unpinned action in claude.yml

   • Read CLAUDE.md and AGENTS.md
   • Read ci-standards.md action pinning policy
   • Read current claude.yml workflow
   • Look up SHA for petry-projects/.github v1 tag → 208ec2d69b75227d375edf8745d84fbac05a76b2
   • Update workflow to pin action to SHA (and align with template using @v1)
   • Commit and push changes
   • Create PR
5. don-petry

   added a commit that references this issue on Apr 9, 2026

   fix(claude.yml): pin reusable workflow to SHA

   ...

   This issue will close once commit 269d904 is merged into the 'main' branch.

   269d904
6. don-petry commented on Apr 10, 2026

   

   don-petry

   on Apr 10, 2026

   ContributorAuthor

   More actions

   Weekly Compliance Audit (2026-04-10)

   This finding is still open.

   Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@main

   Standard: standards/ci-standards.md#action-pinning-policy
7. don-petry

   added

   claude

   and removed

   claude

   on Apr 14, 2026
8. don-petry commented on Apr 14, 2026

   

   don-petry

   on Apr 14, 2026

   Last edited by don-petry

   ContributorAuthor

   More actions

   Claude encountered an error —— View job

   ---

   Fixing unpinned action in claude.yml

   • Read AGENTS.md and CLAUDE.md
   • Read ci-standards.md action pinning policy
   • Check workflow template in standards/workflows/
   • Read current claude.yml workflow
   • Look up SHA for petry-projects/.github v1 tag → 208ec2d69b75227d375edf8745d84fbac05a76b2
   • Update workflow to pin action to SHA
   • Commit and push changes
   • Create PR
9. don-petry commented on Apr 17, 2026

   

   don-petry

   on Apr 17, 2026

   ContributorAuthor

   More actions

   Weekly Compliance Audit (2026-04-17)

   This finding is still open.

   Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@main

   Standard: standards/ci-standards.md#action-pinning-policy
10. don-petry commented on Apr 21, 2026

    

    don-petry

    on Apr 21, 2026

    ContributorAuthor

    More actions

    Weekly Compliance Audit (2026-04-21)

    This finding is still open.

    Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/workflows/claude-code-reusable.yml@main

    Standard: standards/ci-standards.md#action-pinning-policy
11. don-petry commented on Apr 24, 2026

    

    don-petry

    on Apr 24, 2026

    ContributorAuthor

    More actions

    Weekly Compliance Audit (2026-04-24)

    This finding is still open.

    Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/workflows/claude-code-reusable.yml@main

    Standard: standards/ci-standards.md#action-pinning-policy
12. don-petry commented on May 1, 2026

    

    don-petry

    on May 1, 2026

    ContributorAuthor

    More actions

    Weekly Compliance Audit (2026-05-01)

    This finding is still open.

    Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/workflows/claude-code-reusable.yml@main

    Standard: standards/ci-standards.md#action-pinning-policy
13. don-petry commented on May 8, 2026

    

    don-petry

    on May 8, 2026

    ContributorAuthor

    More actions

    Weekly Compliance Audit (2026-05-08)

    This finding is still open.

    Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@main

    Standard: standards/ci-standards.md#action-pinning-policy
14. don-petry

    removed

    claude

    on May 8, 2026
15. 26 remaining items

    Load more
16. don-petry

    added

    claude

    and removed

    claude

    on May 23, 2026
17. don-petry commented on May 26, 2026

    

    don-petry

    on May 26, 2026

    ContributorAuthor

    More actions

    Resolved! This check is now passing as of 2026-05-26. Closing automatically.
18. don-petry

    closed this as completedon May 26, 2026
19. don-petry

    added 2 commits that reference this issue on Jun 8, 2026

    fix(ci): pin claude-code-reusable.yml to @v1 per action pinning policy

    ...

    This issue will close once commit 04bd613 is merged into the 'main' branch.

    04bd613

    fix(ci): pin claude-code-reusable.yml ref to @v1 (#218)

    ...

    This issue will close once commit 2eb8ac7 is merged into the 'main' branch.

    2eb8ac7
20. don-petry

    added 3 commits that reference this issue on Jun 25, 2026

    fix(ci): pin claude-code-reusable.yml ref to @v1 (#218)

    ...

    This issue will close once commit 5b4d6b7 is merged into the 'main' branch.

    5b4d6b7

    fix(ci): pin claude-code-reusable.yml ref to @v1 (#218)

    ...

    This issue will close once commit b16ab61 is merged into the 'main' branch.

    b16ab61

    fix(ci): pin claude-code-reusable.yml ref to @v1 (#218)

    ...

    This issue will close once commit aa66446 is merged into the 'main' branch.

    aa66446
21. don-petry

    added 3 commits that reference this issue on Aug 3, 2026

    fix(ci): pin claude-code-reusable.yml ref to @v1 (#218)

    ...

    This issue will close once commit 6051e32 is merged into the 'main' branch.

    6051e32

    fix(ci): pin claude-code-reusable.yml ref to @v1 (#218)

    ...

    This issue will close once commit 3218800 is merged into the 'main' branch.

    3218800

    fix(ci): pin claude-code-reusable.yml ref to @v1 (#218)

    ...

    This issue will close once commit 1d78190 is merged into the 'main' branch.

    1d78190
22. don-petry

    added a commit that references this issue on Aug 31, 2026

    fix(ci): pin claude-code-reusable.yml ref to @v1 (#218)

    ...

    This issue will close once commit 7b9fef0 is merged into the 'main' branch.

    7b9fef0
23. don-petry

    added a commit that references this issue on Sep 7, 2026

    fix(ci): pin claude-code-reusable.yml ref to @v1 (#218)

    ...

    This issue will close once commit 90baf00 is merged into the 'main' branch.

    90baf00