Updated Blacksmith action pins#28171
Conversation
ref #28047 The Blacksmith migration introduced tag-pinned actions, but repository security policy now requires third-party actions to use full-length commit SHAs.
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## blacksmith-migration-263ee04 #28171 +/- ##
================================================================
+ Coverage 73.86% 73.90% +0.04%
================================================================
Files 1530 1530
Lines 129791 129809 +18
Branches 15575 15639 +64
================================================================
+ Hits 95871 95939 +68
+ Misses 32933 32884 -49
+ Partials 987 986 -1
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
Summary
Context
The workflow security policy rejects tag-pinned actions, and PR #28047 introduced useblacksmith/setup-docker-builder@v1 and useblacksmith/build-push-action@v2.
Testing