Skip to content

chore: pin actions to v2.1.0 SHA#14

Merged
devantler merged 1 commit intomainfrom
chore/pin-actions-to-sha
Apr 12, 2026
Merged

chore: pin actions to v2.1.0 SHA#14
devantler merged 1 commit intomainfrom
chore/pin-actions-to-sha

Conversation

@devantler
Copy link
Copy Markdown
Contributor

Pin all devantler-tech/actions workflow callsites to the latest semver release SHA:
4235593b654b467bb57c2d2f492b1461eab37cba (v2.1.0).

Fixes N/A

Type of change

EOF- [ ] - [ ] - [ ] - [ ] - [x]

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Pins devantler-tech/actions/upsert-issue usages in reporting workflows to the v2.1.0 commit SHA for reproducible GitHub Actions execution and supply-chain safety.

Changes:

  • Update upsert-issue action references from an older SHA to 4235593b654b467bb57c2d2f492b1461eab37cba (v2.1.0) in multiple workflows.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

File Description
.github/workflows/report-repos-with-no-team.yml Pins upsert-issue action to the v2.1.0 SHA.
.github/workflows/report-repos-with-no-admin-team.yml Pins upsert-issue action to the v2.1.0 SHA.
.github/workflows/report-repos-with-multi-admin-teams.yml Pins upsert-issue action to the v2.1.0 SHA.


- name: Manage report issue
uses: devantler-tech/actions/upsert-issue@e3a0bd51f2159079c77872080d493bc5ab9dc8bc # feat: add upsert-issue
uses: devantler-tech/actions/upsert-issue@4235593b654b467bb57c2d2f492b1461eab37cba # v2.1.0
Copy link

Copilot AI Apr 12, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider keeping the previous descriptive comment (e.g., why this action is used / what it does) and placing the version tag in a consistent format across the repo. Right now the comment changed from a purpose/feature note to only a version label, which reduces local context when scanning workflow steps. A concrete option is to include both purpose and version in the comment (or standardize on # v2.1.0 (upsert-issue) if that’s the repo convention).

Suggested change
uses: devantler-tech/actions/upsert-issue@4235593b654b467bb57c2d2f492b1461eab37cba # v2.1.0
uses: devantler-tech/actions/upsert-issue@4235593b654b467bb57c2d2f492b1461eab37cba # upsert-issue v2.1.0

Copilot uses AI. Check for mistakes.

- name: Manage report issue
uses: devantler-tech/actions/upsert-issue@e3a0bd51f2159079c77872080d493bc5ab9dc8bc # feat: add upsert-issue
uses: devantler-tech/actions/upsert-issue@4235593b654b467bb57c2d2f492b1461eab37cba # v2.1.0
Copy link

Copilot AI Apr 12, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same as other workflow: the inline comment now only reflects the version. If these workflows are intended to be self-explanatory, consider preserving a short purpose-oriented note alongside the pinned version so future readers understand the step at a glance.

Suggested change
uses: devantler-tech/actions/upsert-issue@4235593b654b467bb57c2d2f492b1461eab37cba # v2.1.0
uses: devantler-tech/actions/upsert-issue@4235593b654b467bb57c2d2f492b1461eab37cba # v2.1.0 - create or update the report issue

Copilot uses AI. Check for mistakes.

- name: Manage report issue
uses: devantler-tech/actions/upsert-issue@e3a0bd51f2159079c77872080d493bc5ab9dc8bc # feat: add upsert-issue
uses: devantler-tech/actions/upsert-issue@4235593b654b467bb57c2d2f492b1461eab37cba # v2.1.0
Copy link

Copilot AI Apr 12, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If you’re standardizing action pinning, consider applying a consistent comment style across all callsites (e.g., always # vX.Y.Z or always # <action> vX.Y.Z). This avoids future churn when searching/grepping for pins and makes it easier to audit versions.

Copilot uses AI. Check for mistakes.
@devantler devantler merged commit 394c6c7 into main Apr 12, 2026
15 of 17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants