Skip to content

Compliance: unpinned-actions-feature-ideation.yml #104

Closed

Description

@don-petry

Compliance Finding

Category: action-pinning
Severity: error
Check: unpinned-actions-feature-ideation.yml

Detail

Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

Standard Reference

standards/ci-standards.md#action-pinning-policy

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.


This issue was automatically created by the weekly compliance audit.

Activity

  1. don-petry commented on Apr 9, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-04-09)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  2. don-petry commented on Apr 9, 2026

    @don-petry
    ContributorAuthor

    Claude encountered an error —— View job


    I'll analyze this and get back to you.

  3. don-petry commented on Apr 10, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-04-10)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  4. don-petry commented on Apr 14, 2026

    @don-petry
    ContributorAuthor

    Claude finished @don-petry's task in 1m 48s —— View job • claude/issue-104-20260414-1205 • [Create PR ➔](https://github.com/petry-projects/broodly/compare/main...claude/issue-104-20260414-1205?quick_pull=1&title=Issue%20%23104%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%23104%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)


    Fixing Unpinned Action in feature-ideation.yml

    • Read current feature-ideation.yml workflow
    • Fetch the standard template from petry-projects/.github/standards/workflows/feature-ideation.yml
    • Look up the SHA for petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1 → 208ec2d69b75227d375edf8745d84fbac05a76b2
    • Update file: pin SHA + sync with template (added missing dry_run input)
    • Commit and push changes
    • Create PR with "Closes Compliance: unpinned-actions-feature-ideation.yml #104"
    • Tag @don-petry for review

    Summary

    Pinned feature-ideation-reusable.yml@v1 to its resolved SHA 208ec2d69b75227d375edf8745d84fbac05a76b2. Also synced the file with the current standard template by adding the missing dry_run workflow_dispatch input.

    petry-projects/broodly#121

  5. added a commit that references this issue on Apr 14, 2026
    37db7ad
  6. don-petry commented on Apr 17, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-04-17)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  7. don-petry commented on Apr 18, 2026

    @don-petry
    ContributorAuthor

    Claude encountered an error —— View job


    Fixing Unpinned Action in feature-ideation.yml

    • Read current feature-ideation.yml workflow
    • Fetch the standard template from petry-projects/.github/standards/workflows/feature-ideation.yml
    • Look up the SHA for petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1
    • Update file to pin SHA (copy template verbatim)
    • Commit and push changes
    • Create PR with "Closes Compliance: unpinned-actions-feature-ideation.yml #104"
    • Self-review PR and check CI
  8. 13 remaining items

  9. don-petry commented on May 15, 2026

    @don-petry
    ContributorAuthor

    Weekly Compliance Audit (2026-05-15)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  10. added a commit that references this issue on May 21, 2026
  11. don-petry commented on Jun 5, 2026

    @don-petry
    ContributorAuthor

    Resolved! This check is now passing as of 2026-06-05. Closing automatically.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    compliance-auditAutomated compliance audit findingdev-leadFor dev-lead agent pickup

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions