Skip to content

chore(ci): pin floating external actions to SHAs (issue-labeler.yml) - #520

Merged
KooshaPari merged 1 commit into
mainfrom
chore/pin-action-shas-1777072745-3359
Apr 24, 2026
Merged

chore(ci): pin floating external actions to SHAs (issue-labeler.yml)#520
KooshaPari merged 1 commit into
mainfrom
chore/pin-action-shas-1777072745-3359

Conversation

@KooshaPari

@KooshaPari KooshaPari commented Apr 24, 2026

Copy link
Copy Markdown
Owner

User description

Replaces floating external action refs in .github/workflows/issue-labeler.yml with immutable commit SHAs.

Refs replaced: openai/codex-action@main

Tag-pinned and internal KooshaPari refs are untouched.

Generated by API-only pin-hygiene audit.


Note

Low Risk
Low risk: only changes a GitHub Actions workflow dependency reference, with no runtime code or data-handling logic changes; main risk is behavior drift if the pinned commit differs from the previous @main tip.

Overview
Pins the openai/codex-action reference in .github/workflows/issue-labeler.yml from the floating @main ref to a specific commit SHA to make CI behavior reproducible and reduce supply-chain risk.

Reviewed by Cursor Bugbot for commit 91e24d4. Bugbot is set up for automated code reviews on this repo. Configure here.


CodeAnt-AI Description

Pin the issue label suggestion workflow to a fixed Codex action version

What Changed

  • The issue-labeling workflow now uses a specific, fixed version of the Codex action instead of following the latest main branch
  • This keeps label suggestion runs consistent and reduces the chance of unexpected workflow changes

Impact

✅ More predictable label suggestions
✅ Fewer unexpected CI changes
✅ Lower supply-chain risk

🔄 Retrigger CodeAnt AI Review

Details

💡 Usage Guide

Checking Your Pull Request

Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.

Talking to CodeAnt AI

Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:

@codeant-ai ask: Your question here

This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.

Example

@codeant-ai ask: Can you suggest a safer alternative to storing this secret?

Preserve Org Learnings with CodeAnt

You can record team preferences so CodeAnt AI applies them in future reviews. Reply directly to the specific CodeAnt AI suggestion (in the same thread) and replace "Your feedback here" with your input:

@codeant-ai: Your feedback here

This helps CodeAnt AI learn and adapt to your team's coding style and standards.

Example

@codeant-ai: Do not flag unused imports.

Retrigger review

Ask CodeAnt AI to review the PR again, by typing:

@codeant-ai: review

Check Your Repository Health

To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.

@gemini-code-assist

Copy link
Copy Markdown

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!

@codeant-ai

codeant-ai Bot commented Apr 24, 2026

Copy link
Copy Markdown

CodeAnt AI is reviewing your PR.


Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

@KooshaPari
KooshaPari merged commit 0e9c16f into main Apr 24, 2026
1 check was pending
@codeant-ai codeant-ai Bot added the size:XS This PR changes 0-9 lines, ignoring generated files label Apr 24, 2026
@codeant-ai

codeant-ai Bot commented Apr 24, 2026

Copy link
Copy Markdown

CodeAnt AI finished reviewing your PR.

@KooshaPari
KooshaPari deleted the chore/pin-action-shas-1777072745-3359 branch May 2, 2026 19:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:XS This PR changes 0-9 lines, ignoring generated files

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant