Skip to content

Update CI workflow names and triggers and pin actions to specific SHAs#25

Merged
hyperfinitism merged 2 commits intomainfrom
ci/hash-pinning-and-tweaks
Mar 31, 2026
Merged

Update CI workflow names and triggers and pin actions to specific SHAs#25
hyperfinitism merged 2 commits intomainfrom
ci/hash-pinning-and-tweaks

Conversation

@hyperfinitism
Copy link
Copy Markdown
Owner

@hyperfinitism hyperfinitism commented Mar 31, 2026

Changes

  • Change the workflow name of test.yml from "Integration Tests" to "Test"; the test code now includes unit tests.
  • Change the workflow name of lint.yml from "Lint (Rust)" to "Lint".
  • Add .github/actions/install-tpm2-tss/** to workflow trigger paths (excluding spdx.yml).
  • Pin GitHub actions using commit SHAs instead of version tags.

@hyperfinitism hyperfinitism requested a review from Copilot March 31, 2026 13:02
@hyperfinitism hyperfinitism self-assigned this Mar 31, 2026
@hyperfinitism hyperfinitism added the ci/cd CI/CD related items label Mar 31, 2026
@gemini-code-assist
Copy link
Copy Markdown

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

@hyperfinitism hyperfinitism changed the title Update CI workflow names and pin actions to specific SHAs Update CI workflow names and triggers and pin actions to specific SHAs Mar 31, 2026
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates GitHub Actions workflow presentation and dependency hygiene by renaming CI workflows to better reflect their scope, ensuring CI runs when the local install-tpm2-tss action changes, and pinning third-party actions to immutable commit SHAs.

Changes:

  • Renamed workflows to more generic names (Integration TestsTest, Lint (Rust)Lint).
  • Expanded workflow path filters to include .github/actions/install-tpm2-tss/** (excluding spdx.yml).
  • Pinned referenced GitHub Actions to specific commit SHAs instead of version tags.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File Description
.github/workflows/test.yml Renames workflow, adds local action path triggers, pins checkout/toolchain actions.
.github/workflows/lint.yml Renames workflow, adds local action path triggers, pins checkout/toolchain actions.
.github/workflows/build.yml Adds local action path triggers and pins checkout/toolchain actions.
.github/workflows/spdx.yml Pins checkout to a commit SHA and removes the previous inline ref note for the SPDX action.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@hyperfinitism hyperfinitism force-pushed the ci/hash-pinning-and-tweaks branch from 59e7b62 to e6fcd9c Compare March 31, 2026 13:09
Signed-off-by: Takuma IMAMURA <209989118+hyperfinitism@users.noreply.github.com>
Signed-off-by: Takuma IMAMURA <209989118+hyperfinitism@users.noreply.github.com>
@hyperfinitism hyperfinitism force-pushed the ci/hash-pinning-and-tweaks branch from e6fcd9c to e129627 Compare March 31, 2026 13:10
@hyperfinitism hyperfinitism merged commit 7648919 into main Mar 31, 2026
22 checks passed
@hyperfinitism hyperfinitism deleted the ci/hash-pinning-and-tweaks branch March 31, 2026 13:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci/cd CI/CD related items

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants