Compliance: unpinned-actions-claude.yml

[don-petry]

Compliance Finding

Category: action-pinning
Severity: error
Check: unpinned-actions-claude.yml

Detail

Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@main

Standard Reference

standards/ci-standards.md#action-pinning-policy

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.

---

This issue was automatically created by the weekly compliance audit.

[don-petry]

Weekly Compliance Audit (2026-04-09)

This finding is still open.

Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@main

Standard: standards/ci-standards.md#action-pinning-policy

[don-petry]

Claude encountered an error —— View job • claude/issue-105-20260409-1711 • [Create PR ➔](https://github.com/petry-projects/.github/compare/main...claude/issue-105-20260409-1711?quick_pull=1&title=Issue%20%23105%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%23105%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)

---

Fixing unpinned action in claude.yml

• Read CLAUDE.md and AGENTS.md
• Read ci-standards.md action pinning policy
• Read current claude.yml workflow
• Look up SHA for petry-projects/.github v1 tag → 208ec2d69b75227d375edf8745d84fbac05a76b2
• Update workflow to pin action to SHA (and align with template using @v1)
• Commit and push changes
• Create PR

[don-petry]

Weekly Compliance Audit (2026-04-10)

This finding is still open.

Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@main

Standard: standards/ci-standards.md#action-pinning-policy

[don-petry]

Claude encountered an error —— View job

---

Fixing unpinned action in claude.yml

• Read AGENTS.md and CLAUDE.md
• Read ci-standards.md action pinning policy
• Check workflow template in standards/workflows/
• Read current claude.yml workflow
• Look up SHA for petry-projects/.github v1 tag → 208ec2d69b75227d375edf8745d84fbac05a76b2
• Update workflow to pin action to SHA
• Commit and push changes
• Create PR

[don-petry]

Weekly Compliance Audit (2026-04-17)

This finding is still open.

Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@main

Standard: standards/ci-standards.md#action-pinning-policy

[don-petry]

Weekly Compliance Audit (2026-04-21)

This finding is still open.

Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/workflows/claude-code-reusable.yml@main

Standard: standards/ci-standards.md#action-pinning-policy

[don-petry]

Weekly Compliance Audit (2026-04-24)

This finding is still open.

Detail: Workflow claude.yml has 1 action(s) not pinned to SHA: uses: petry-projects/.github/workflows/claude-code-reusable.yml@main

Standard: standards/ci-standards.md#action-pinning-policy