Skip to content

ci: pin issue/PR triage actions to full commit SHAs - #5992

Open
kobihikri wants to merge 1 commit into
ajaxorg:masterfrom
kobihikri:ci/pin-triage-actions
Open

ci: pin issue/PR triage actions to full commit SHAs#5992
kobihikri wants to merge 1 commit into
ajaxorg:masterfrom
kobihikri:ci/pin-triage-actions

Conversation

@kobihikri

@kobihikri kobihikri commented Jul 14, 2026

Copy link
Copy Markdown

What

Pin kaizencc/issue-reprioritization-manager and kaizencc/pr-triage-manager in issue-reprioritization.yml from @main to the commits they resolve to.

Why

Both are third-party (personal-account) actions handed GITHUB_TOKEN with issues: write, referenced by the moving @main branch — so the code that runs with the token can change without any change here. Pinning to full SHAs closes that; behaviour unchanged.

I used AI assistance to identify this and draft the change; I verified it against the live workflow myself.

Open kitchen-sink @ 66f61bce4b6551a7911a8c25e9d728db29f9c089

issue-reprioritization.yml passes GITHUB_TOKEN (issues: write) to two kaizencc/*
actions via the mutable @main branch. Pin both to the commit @main resolves to.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant