Pin CI actions to commit SHAs#5

Merged

im-sham merged 1 commit into

mainfrom

codex/g168-action-sha-pinning

May 7, 2026

Owner

im-sham commented May 7, 2026

Summary

Pin Forge CI GitHub Actions to full commit SHAs with tag comments
Add workflow regression coverage to reject tag-based action refs

Validation

.venv/bin/ruff check tests/test_ci_workflow.py
.venv/bin/pytest tests/test_ci_workflow.py -q
ruby -e 'require "yaml"; Dir[".github/workflows/*.yml"].each { |p| YAML.load_file(p) }'
git diff --check -- .github/workflows/ci.yml tests/test_ci_workflow.py


          Pin CI actions to commit SHAs

d06edee

im-sham merged commit 4f4998e into main

4 checks passed

im-sham deleted the codex/g168-action-sha-pinning branch

May 7, 2026 17:42

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet