Skip to content

chore: avoid Renovate validator SHA churn - #3566

Merged
setchy merged 3 commits into
mainfrom
asetch-cisco-avoid-renovate-validator-sha-churn
Oct 29, 2026
Merged

setchy merged 3 commits into
mainfrom
asetch-cisco-avoid-renovate-validator-sha-churn

Conversation

@setchy

@setchy setchy commented Oct 29, 2026

Copy link
Copy Markdown
Member

Summary

  • Let the trusted Renovate config validator reusable workflow track main rather than a fixed commit SHA.
  • Keep zizmor's global hash-pin policy and allow ref pinning only for the exact trusted workflow path.

Dependency

Merge gitify-app/renovate-config#20 first: gitify-app/renovate-config#20. That shared preset change disables digest pinning for this exact reusable workflow; this PR updates the consumer reference and its matching zizmor policy.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@github-actions github-actions Bot added the chore Miscellaneous tasks label Oct 29, 2026
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@setchy
setchy marked this pull request as ready for review October 29, 2026 18:37
@setchy
setchy requested a review from afonsojramos as a code owner October 29, 2026 18:37
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@setchy
setchy merged commit c67462f into main Oct 29, 2026
14 checks passed
@setchy
setchy deleted the asetch-cisco-avoid-renovate-validator-sha-churn branch October 29, 2026 18:38
@github-actions github-actions Bot added this to the Release 8.0.0 milestone Oct 29, 2026
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore Miscellaneous tasks

Development

Successfully merging this pull request may close these issues.

1 participant