fix(ci): key action refs already used by the workflows - #74
Conversation
+ actions/attest-build-provenance@4d10147 + actions/cache@55cc834 + actions/checkout@3d3c42e + actions/configure-pages@45bfe01 + actions/deploy-pages@368f825 + actions/download-artifact@3e5f45b + actions/upload-artifact@043fb46 + actions/upload-pages-artifact@fc324d3 + dependabot/fetch-metadata@25dd0e3 + editorconfig-checker/action-editorconfig-checker@51f6331 + erlef/setup-beam@54075bc + github/codeql-action@b96794f + haskell-actions/setup@6037f33 + hyperpolymath/smtp-notify-action@22e7bdb ... (3 more) Every SHA-pinned `uses:` ref in .github/workflows/ is now present in .github/workflows/actions.lock. Entry format matches gh actions-lock v0.0.2 (ref/commit/owner_id/repo_id); entries reuse the estate SSOT (hyperpolymath/standards) lock where the same ref is keyed there, owner/repo ids otherwise resolved from the GitHub API. No workflow files changed. Verified: validate-actions-lock.sh -> exit 0 (was: 17 missing ref(s)).
|
Important Review skippedReview was skipped due to path filters ⛔ Files ignored due to path filters (1)
CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including ⚙️ Run configurationConfiguration used: Organization UI Review profile: ASSERTIVE Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
|
1 participant
fix(ci): key action refs already used by the workflows
... (3 more)
Every SHA-pinned
uses:ref in .github/workflows/ is now present in.github/workflows/actions.lock. Entry format matches gh actions-lock v0.0.2
(ref/commit/owner_id/repo_id); entries reuse the estate SSOT
(hyperpolymath/standards) lock where the same ref is keyed there, owner/repo
ids otherwise resolved from the GitHub API. No workflow files changed.
Verified: validate-actions-lock.sh -> exit 0 (was: 17 missing ref(s)).