Skip to content

chore(security): pin claude-code-action to known-good v1.0.174 - #8

Merged
abir-vim merged 1 commit into
mainfrom
chore/pin-scanner-action
Jul 20, 2026
Merged

chore(security): pin claude-code-action to known-good v1.0.174#8
abir-vim merged 1 commit into
mainfrom
chore/pin-scanner-action

Conversation

@abir-vim

Copy link
Copy Markdown
Collaborator

Automated fleet sync of the org security scanner. Pins claude-code-action off the floating @v1 tag (which regressed at v1.0.175+ and silently no-ops on Bedrock, failing the scan gate closed) to the known-good SHA. See scanner-org for the source template.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 20, 2026

Copy link
Copy Markdown

Deploying theme-editor-deploy with  Cloudflare Pages  Cloudflare Pages

Latest commit: d32b8a5
Status: ✅  Deploy successful!
Preview URL: https://219cf69c.theme-editor-deploy.pages.dev
Branch Preview URL: https://chore-pin-scanner-action.theme-editor-deploy.pages.dev

View logs

@github-actions

Copy link
Copy Markdown

Security Scanner Results

Critical High Medium Low Info Dep BLOCK Dep WARN
0 0 0 0 1 0 0

Findings

  • Confirm pinned claude-code-action SHA matches the claimed upstream tag.github/workflows/security.yml:156
    • Remediation: Verify the pinned SHA is the exact commit behind anthropics/claude-code-action's v1.0.174 release tag (e.g. git ls-remote https://github.com/anthropics/claude-code-action refs/tags/v1.0.174), ideally against a signed tag, and keep the # v1.0.174 comment accurate on any future bumps.

Gate blocks at severity critical or a dependency marked BLOCK. Full history in scanner-stats.

@abir-vim
abir-vim merged commit b2aa47c into main Jul 20, 2026
4 checks passed
@abir-vim
abir-vim deleted the chore/pin-scanner-action branch July 20, 2026 09:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant