Skip to content

revert chore(ci): update rancher-eio/read-vault-secrets digest to 0da8515 (backport #186)#191

Merged
wheatdog merged 1 commit into
v1.7from
mergify/bp/v1.7/pr-186
Jun 26, 2026
Merged

revert chore(ci): update rancher-eio/read-vault-secrets digest to 0da8515 (backport #186)#191
wheatdog merged 1 commit into
v1.7from
mergify/bp/v1.7/pr-186

Conversation

@mergify

@mergify mergify Bot commented Jun 26, 2026

Copy link
Copy Markdown

fossa workflow failed after merging d024582

The root cause is:

  • Old d266f55 uses the pinned dependency: hashicorp/vault-action@4c06c5c
  • New 0da8515 uses: hashicorp/vault-action@v3

Although hashicorp/vault-action@* is allowlisted, the enterprise separately requires actions to use full commit SHAs. GitHub applies that requirement to nested actions inside composite actions too. GitHub documents this SHA-pinning policy.


This is an automatic backport of pull request #186 done by Mergify.

…8515

Signed-off-by: Cooper Tseng <cooper.tseng@suse.com>
(cherry picked from commit 5423379)
@mergify

mergify Bot commented Jun 26, 2026

Copy link
Copy Markdown
Author

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

  • Queue this pull request

@wheatdog wheatdog merged commit 33233ec into v1.7 Jun 26, 2026
6 checks passed
@wheatdog wheatdog deleted the mergify/bp/v1.7/pr-186 branch June 26, 2026 07:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants