Skip to content

Compliance: unpinned-actions-feature-ideation.yml #159

New issue
New issue
Closed
#220
Closed
Compliance: unpinned-actions-feature-ideation.yml#159
#220
Labels
compliance-auditAutomated compliance audit finding

Description

@don-petry
don-petry
opened on Apr 9, 2026

Compliance Finding

Category: action-pinning
Severity: error
Check: unpinned-actions-feature-ideation.yml

Detail

Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

Standard Reference

standards/ci-standards.md#action-pinning-policy

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.

This issue was automatically created by the weekly compliance audit.

Activity

  1. don-petry
    added
    compliance-auditAutomated compliance audit finding
    on Apr 9, 2026

  2. don-petry commented on Apr 9, 2026

    @don-petry
    don-petry
    on Apr 9, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-04-09)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  3. don-petry
    added
    claude
    on Apr 9, 2026

  4. don-petry commented on Apr 9, 2026

    @don-petry
    don-petry
    on Apr 9, 2026
    CollaboratorAuthor

    Claude encountered an error —— View job

    I'll analyze this and get back to you.

  5. don-petry commented on Apr 10, 2026

    @don-petry
    don-petry
    on Apr 10, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-04-10)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  6. don-petry
    added
    claude
    and removed
    claude
    on Apr 14, 2026

  7. don-petry commented on Apr 14, 2026

    @don-petry
    don-petry
    on Apr 14, 2026
    CollaboratorAuthor

    Claude finished @don-petry's task in 1m 32s —— View job • claude/issue-159-20260414-1124 • Create PR ➔%20·%20View%20job%20run

    Fixing Unpinned Action in feature-ideation.yml

    • Gather context and read current workflow file
    • Fetch standards template from petry-projects/.github
    • Look up SHA for feature-ideation-reusable.yml@v1 → 208ec2d69b75227d375edf8745d84fbac05a76b2
    • Update workflow file with pinned SHA (also synced missing dry_run input from template)
    • Commit and push changes
    • Create PR

    Done. Pinned petry-projects/.github/.github/workflows/feature-ideation-reusable.yml from @v1 to @208ec2d69b75227d375edf8745d84fbac05a76b2 # v1, and synced the missing dry_run input/param from the upstream standards template.

  8. don-petry
    added a commit that references this issue on Apr 14, 2026

    ci: pin feature-ideation-reusable.yml to SHA for action pinning compl…

    50b4a6f

  9. don-petry commented on Apr 17, 2026

    @don-petry
    don-petry
    on Apr 17, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-04-17)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  10. don-petry
    added
    claude
    and removed
    claude
    on Apr 18, 2026

  11. don-petry commented on Apr 18, 2026

    @don-petry
    don-petry
    on Apr 18, 2026
    CollaboratorAuthor

    Claude finished @don-petry's task in 3m 10s —— View job • claude/issue-159-20260418-1852 • [Create PR ➔](https://github.com/petry-projects/google-app-scripts/compare/main...claude/issue-159-20260418-1852?quick_pull=1&title=Issue%20%23159%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%23159%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)

    Fixing Unpinned Action in feature-ideation.yml

    • Gather context and analyze issue
    • Check current state of feature-ideation.yml and PR ci: pin feature-ideation-reusable.yml to SHA (action pinning compliance) #183 (still open, not merged)
    • Fetch standards template from petry-projects/.github
    • Look up current SHA for feature-ideation-reusable.yml@v1 → ee22b427cbce9ecadcf2b436acb57c3adf0cb63d
    • Update workflow file with pinned SHA (synced template: dry_run input, actions: read permission, sources_file comment)
    • Commit and push changes
    • Created PR #203
    • Self-reviewed PR — changes are correct, no issues found
    • Tagged @don-petry (CODEOWNERS) for review

    Done. Pinned petry-projects/.github/.github/workflows/feature-ideation-reusable.yml from @v1 to @ee22b427cbce9ecadcf2b436acb57c3adf0cb63d # v1, and synced template updates (dry_run input, actions: read permission, sources_file comment).

    Note: The previous PR #183 is still open — it can be closed once this one is merged.
    · Branch · PR #203

  12. don-petry
    added a commit that references this issue on Apr 18, 2026

    ci: pin feature-ideation-reusable.yml to SHA (action pinning compliance)

    d4de5b4
  13. don-petry
    removed
    claude
    on Apr 19, 2026

  14. 3 remaining items

  15. don-petry commented on Apr 21, 2026

    @don-petry
    don-petry
    on Apr 21, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-04-21)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  16. don-petry commented on Apr 24, 2026

    @don-petry
    don-petry
    on Apr 24, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-04-24)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  17. don-petry commented on May 1, 2026

    @don-petry
    don-petry
    on May 1, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-01)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  18. don-petry commented on May 8, 2026

    @don-petry
    don-petry
    on May 8, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-08)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  19. don-petry commented on May 11, 2026

    @don-petry
    don-petry
    on May 11, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-11)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  20. don-petry commented on May 12, 2026

    @don-petry
    don-petry
    on May 12, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  21. don-petry commented on May 12, 2026

    @don-petry
    don-petry
    on May 12, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  22. don-petry commented on May 12, 2026

    @don-petry
    don-petry
    on May 12, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  23. don-petry commented on May 12, 2026

    @don-petry
    don-petry
    on May 12, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  24. don-petry commented on May 12, 2026

    @don-petry
    don-petry
    on May 12, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-12)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  25. don-petry commented on May 13, 2026

    @don-petry
    don-petry
    on May 13, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-13)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  26. don-petry commented on May 15, 2026

    @don-petry
    don-petry
    on May 15, 2026
    CollaboratorAuthor

    Weekly Compliance Audit (2026-05-15)

    This finding is still open.

    Detail: Workflow feature-ideation.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1

    Standard: standards/ci-standards.md#action-pinning-policy

  27. don-petry
    added a commit that references this issue on May 19, 2026

    fix(ci): pin feature-ideation reusable workflow to SHA (#220)

    8fd81fd
  28. don-petry
    closed this as completedin #220on May 19, 2026
  29. don-petry
    added a commit that references this issue on Aug 4, 2026

    fix(ci): pin feature-ideation reusable workflow to SHA (#220)

    45d9db5
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    compliance-auditAutomated compliance audit finding

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions