Skip to content

chore(otterdog): pinning workflows due to blueprint pin-github-actions - #9

Merged
stbischof merged 1 commit into
mainfrom
otterdog/blueprint/pin-github-actions
Oct 3, 2026
Merged

stbischof merged 1 commit into
mainfrom
otterdog/blueprint/pin-github-actions

Conversation

@eclipse-otterdog

Copy link
Copy Markdown
Contributor

This PR has been automatically created by Otterdog due to blueprint: Pin GitHub Actions to commit SHAs.

Supply-chain hardening: every used action / reusable workflow gets pinned to a full commit SHA (with a version comment). Opt-out per line via "# ignore: pin". Note: the "uses: osgi/.github/..." references from the require-ci-workflows blueprint stay on @main deliberately — pinning them would defeat the central-update mechanism; mark them with "# ignore: pin" if this blueprint proposes pinning there.

Note

Closing this PR without merging will dismiss this blueprint for this repository.
To re-enable the blueprint, re-open the PR.

Tip

The status of the blueprint can also be accessed via the Dashboard.

@stbischof stbischof closed this Oct 2, 2026
@eclipse-otterdog
eclipse-otterdog Bot deleted the otterdog/blueprint/pin-github-actions branch October 2, 2026 09:41
@stbischof stbischof reopened this Oct 2, 2026
The branch is main plus this empty commit, so GitHub can rebase merge it.
The workflow is a stub with nothing to pin.

Signed-off-by: Stefan Bischof <stbischof@bipolis.org>
@stbischof
stbischof force-pushed the otterdog/blueprint/pin-github-actions branch from 3589793 to 1fea11a Compare October 3, 2026 14:03
@stbischof
stbischof merged commit aabf941 into main Oct 3, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant