ci: review-pin actions/setup-go v7.0.0 and setup-node v7.0.0 - #41
Merged
Conversation
|
You have reached your Codex usage limits for security reviews. Please try again later. |
|
Important
This repository does not receive automatic reviews because it has fewer than 10 stars. ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Plus Run ID: Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
This was referenced Aug 28, 2026
10 tasks
cursor Bot
pushed a commit
that referenced
this pull request
Aug 28, 2026
The push/schedule sanitizer (--tracked --history) already failed these six deterministic findings on d880c0f and still fails them on the PR #41 pin bump. Tracked scan is clean; this does not change the scanner, skip --history, or broaden beyond the six denies. Add history-blob allowlist entries for cmd/portable-ghar-runtime-lock/main_test.go@99d55b0de82a227bcfd52f4b9ca64130db9c4338 lines 43 (DEPLOYID002), 53 (URI001), and 74 (DEPLOYID002), matching the existing @504a9c865eb35654def0a297c05c2b3b25b80895 exceptions. The flagged lines are byte-identical; hashes were computed with the scanner's own line hasher against the full blob OID. Add the Cursor Agent cursor.com identity and the unprefixed users.noreply.github.com co-author form to PUBLIC_HISTORY_METADATA_LINES. Keep the existing GitHub-id form. Co-authored-by: John Osumi <sumitake@users.noreply.github.com>
sumitake
added a commit
that referenced
this pull request
Aug 28, 2026
The push/schedule sanitizer (--tracked --history) already failed these six deterministic findings on d880c0f and still fails them on the PR #41 pin bump. Tracked scan is clean; this does not change the scanner, skip --history, or broaden beyond the six denies. Add history-blob allowlist entries for cmd/portable-ghar-runtime-lock/main_test.go@99d55b0de82a227bcfd52f4b9ca64130db9c4338 lines 43 (DEPLOYID002), 53 (URI001), and 74 (DEPLOYID002), matching the existing @504a9c865eb35654def0a297c05c2b3b25b80895 exceptions. The flagged lines are byte-identical; hashes were computed with the scanner's own line hasher against the full blob OID. Add the Cursor Agent cursor.com identity and the unprefixed users.noreply.github.com co-author form to PUBLIC_HISTORY_METADATA_LINES. Keep the existing GitHub-id form. Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: John Osumi <sumitake@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Supersedes Dependabot PRs #9 (
setup-go6.5.0 → 7.0.0) and #5 (setup-node6.4.0 → 7.0.0).Those PRs selected the tagged SHAs but could not pass
scripts/check_workflow_policy.pybecauseREVIEWED_ACTION_PINSstill named the v6 pins. This change updates the workflows and the reviewed pin table together.Verified:
actions/setup-go@v7.0.0==b7ad1dad31e06c5925ef5d2fc7ad053ef454303eactions/setup-node@v7.0.0==820762786026740c76f36085b0efc47a31fe5020python3 scripts/check_workflow_policy.py .github/workflowspassedpython3 -m unittest tests.repository.test_workflow_policy -vpassed (41 tests)