Skip to content

GHA: license check and action pinning#7

Merged
stephen-derosa merged 7 commits intomainfrom
sderosa/ci-safety
Apr 9, 2026
Merged

GHA: license check and action pinning#7
stephen-derosa merged 7 commits intomainfrom
sderosa/ci-safety

Conversation

@stephen-derosa
Copy link
Copy Markdown
Contributor

No description provided.

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds GitHub Actions checks to enforce pinned action refs and validate Apache license headers as part of the existing CI workflow.

Changes:

  • Introduces reusable workflows for pin-checking (pinact) and license-header checking (addlicense via Docker).
  • Updates the main build workflow to call these reusable workflows.
  • Pins previously unpinned GitHub Actions to specific commit SHAs and tightens job permissions for the build job.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File Description
.github/workflows/pin_check.yml New reusable workflow to verify uses: refs are pinned.
.github/workflows/license_check.yml New reusable workflow to validate Apache license headers via addlicense.
.github/workflows/builds.yml Calls the new reusable workflows; pins action versions by SHA; adds contents: read permissions for the build job.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

stephen-derosa and others added 3 commits April 9, 2026 12:55
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…ntain permissions'

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated no new comments.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

stephen-derosa and others added 2 commits April 9, 2026 13:36
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@stephen-derosa stephen-derosa merged commit f231c0c into main Apr 9, 2026
7 checks passed
@stephen-derosa stephen-derosa deleted the sderosa/ci-safety branch April 9, 2026 19:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants