From 3f044ba41a8b9d71398c47bcc837c8c5f2ae9a88 Mon Sep 17 00:00:00 2001 From: Imran Siddique Date: Sat, 1 Aug 2026 13:50:14 -0700 Subject: [PATCH] chore(ci): pin agentrust-io/.github checkout to an immutable SHA The contributor-check workflow runs on pull_request_target holding issues: write and pull-requests: write, and checked out agentrust-io/.github at `ref: main`. Anyone able to land a commit on that repo's main therefore got a write-capable token in this repo. The org action's own template comment says the ref must not be mutable. Pinned to 0fe4520 (main as of 2026-08-01), which also carries the AGT bump to 359a6b8 and its fail-closed UNKNOWN risk ordering, so errored or rate-limited checks stop being scored as clean. --- .github/workflows/contributor-check.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/contributor-check.yml b/.github/workflows/contributor-check.yml index 5c23957..710f2b4 100644 --- a/.github/workflows/contributor-check.yml +++ b/.github/workflows/contributor-check.yml @@ -30,7 +30,10 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: agentrust-io/.github - ref: main + # Pinned deliberately: this workflow runs on pull_request_target + # with a write-capable token, so the code it checks out must not + # track a mutable ref. Bump this SHA after reviewing the diff. + ref: 0fe4520ee71a743fcd33f409fe366ee3e1da6f86 # main as of 2026-08-01 persist-credentials: false sparse-checkout: | scripts