Repository navigation
Compliance: unpinned-actions-agent-shield.yml #154
Description
Compliance Finding
Category: action-pinning
Severity: error
Check: unpinned-actions-agent-shield.yml
Detail
Workflow agent-shield.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1
Standard Reference
standards/ci-standards.md#action-pinning-policy
Remediation
Please review the linked standard and bring this repository into compliance.
See the full standards documentation for implementation guidance.
This issue was automatically created by the weekly compliance audit.
Activity
don-petry commentedon Apr 9, 2026
Weekly Compliance Audit (2026-04-09)
This finding is still open.
Detail: Workflow
agent-shield.ymlhas 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1Standard: standards/ci-standards.md#action-pinning-policy
don-petry commentedon Apr 9, 2026
Claude encountered an error —— View job
I'll analyze this and get back to you.
don-petry commentedon Apr 10, 2026
Weekly Compliance Audit (2026-04-10)
This finding is still open.
Detail: Workflow
agent-shield.ymlhas 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1Standard: standards/ci-standards.md#action-pinning-policy
don-petry commentedon Apr 14, 2026
Claude finished @don-petry's task in 1m 23s —— View job •
claude/issue-154-20260414-1111• [Create PR ➔](https://github.com/petry-projects/google-app-scripts/compare/main...claude/issue-154-20260414-1111?quick_pull=1&title=Issue%20%23154%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%23154%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)Fixing Unpinned Action in agent-shield.yml
petry-projects/.github/standards/workflows/agent-shield.ymlpetry-projects/.githubreusable workflow (v1→ae9709f4466dec60a5733c9e7487f69dcd004e05).github/workflows/agent-shield.ymlwith pinned SHASummary
Pinned
petry-projects/.github/.github/workflows/agent-shield-reusable.ymlfrom@v1to@ae9709f4466dec60a5733c9e7487f69dcd004e05 # v1in.github/workflows/agent-shield.yml.The SHA was resolved by dereferencing the annotated
v1tag (tag object208ec2d6...→ commitae9709f4...).Pull Request #178 |
ci: pin agent-shield reusable workflow to SHA
don-petry commentedon Apr 17, 2026
Weekly Compliance Audit (2026-04-17)
This finding is still open.
Detail: Workflow
agent-shield.ymlhas 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1Standard: standards/ci-standards.md#action-pinning-policy
don-petry commentedon Apr 18, 2026
Claude encountered an error —— View job
I'll analyze this and get back to you.
7 remaining items
don-petry commentedon May 12, 2026
Weekly Compliance Audit (2026-05-12)
This finding is still open.
Detail: Workflow
agent-shield.ymlhas 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1Standard: standards/ci-standards.md#action-pinning-policy
don-petry commentedon May 12, 2026
Weekly Compliance Audit (2026-05-12)
This finding is still open.
Detail: Workflow
agent-shield.ymlhas 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1Standard: standards/ci-standards.md#action-pinning-policy
don-petry commentedon May 12, 2026
Weekly Compliance Audit (2026-05-12)
This finding is still open.
Detail: Workflow
agent-shield.ymlhas 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1Standard: standards/ci-standards.md#action-pinning-policy
don-petry commentedon May 12, 2026
Weekly Compliance Audit (2026-05-12)
This finding is still open.
Detail: Workflow
agent-shield.ymlhas 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1Standard: standards/ci-standards.md#action-pinning-policy
don-petry commentedon May 12, 2026
Weekly Compliance Audit (2026-05-12)
This finding is still open.
Detail: Workflow
agent-shield.ymlhas 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1Standard: standards/ci-standards.md#action-pinning-policy
don-petry commentedon May 13, 2026
Weekly Compliance Audit (2026-05-13)
This finding is still open.
Detail: Workflow
agent-shield.ymlhas 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1Standard: standards/ci-standards.md#action-pinning-policy
don-petry commentedon May 15, 2026
Weekly Compliance Audit (2026-05-15)
This finding is still open.
Detail: Workflow
agent-shield.ymlhas 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1Standard: standards/ci-standards.md#action-pinning-policy
don-petry commentedon Jun 5, 2026
Resolved! This check is now passing as of 2026-06-05. Closing automatically.
fix: pin agent-shield reusable workflow to SHA (#222)