From 1e17fc4c79a7145de9ead275a3b2a4bf692edaa5 Mon Sep 17 00:00:00 2001 From: Gloire Rubambiza Date: Tue, 28 Apr 2026 10:19:45 -0400 Subject: [PATCH 1/6] ci: Add PR verifier caller workflow Assisted-By: Claude Opus 4.6 Signed-off-by: Gloire Rubambiza --- .github/workflows/pr-verifier.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .github/workflows/pr-verifier.yml diff --git a/.github/workflows/pr-verifier.yml b/.github/workflows/pr-verifier.yml new file mode 100644 index 0000000..5eb4758 --- /dev/null +++ b/.github/workflows/pr-verifier.yml @@ -0,0 +1,10 @@ +name: PR Verifier + +on: + pull_request: + types: [opened, edited, synchronize, reopened] + +jobs: + verify: + uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@main + From 5c618473a8276204d0331502867fab12dfc25db3 Mon Sep 17 00:00:00 2001 From: Gloire Rubambiza Date: Tue, 28 Apr 2026 10:29:50 -0400 Subject: [PATCH 2/6] ci: Pin reusable workflow to SHA Assisted-By: Claude Opus 4.6 Signed-off-by: Gloire Rubambiza --- .github/workflows/pr-verifier.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pr-verifier.yml b/.github/workflows/pr-verifier.yml index 5eb4758..85526ff 100644 --- a/.github/workflows/pr-verifier.yml +++ b/.github/workflows/pr-verifier.yml @@ -6,5 +6,5 @@ on: jobs: verify: - uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@main + uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@ae31c56d344b1efc6ef174338c488b1e355649bc From 85a991d5231a62dea766dd58a583fd485a010dd2 Mon Sep 17 00:00:00 2001 From: Gloire Rubambiza Date: Tue, 28 Apr 2026 14:24:57 -0400 Subject: [PATCH 3/6] ci: Update pinned SHA to include action fix Assisted-By: Claude Opus 4.6 Signed-off-by: Gloire Rubambiza --- .github/workflows/pr-verifier.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pr-verifier.yml b/.github/workflows/pr-verifier.yml index 85526ff..16341fb 100644 --- a/.github/workflows/pr-verifier.yml +++ b/.github/workflows/pr-verifier.yml @@ -6,5 +6,5 @@ on: jobs: verify: - uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@ae31c56d344b1efc6ef174338c488b1e355649bc + uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@fccbcfaaadf24f180b4a754377ceff6d9e000297 From bb7c9e0a7012ff299612c917141b748982dc5c99 Mon Sep 17 00:00:00 2001 From: Gloire Rubambiza Date: Wed, 29 Apr 2026 08:52:03 -0400 Subject: [PATCH 4/6] ci: Fix trailing newline in pr-verifier.yml Assisted-By: Claude Opus 4.6 Signed-off-by: Gloire Rubambiza --- .github/workflows/pr-verifier.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/pr-verifier.yml b/.github/workflows/pr-verifier.yml index 16341fb..d04a7fe 100644 --- a/.github/workflows/pr-verifier.yml +++ b/.github/workflows/pr-verifier.yml @@ -7,4 +7,3 @@ on: jobs: verify: uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@fccbcfaaadf24f180b4a754377ceff6d9e000297 - From 9ea25556996e8ad705fa09ac20d65a0a463c1ae4 Mon Sep 17 00:00:00 2001 From: Gloire Rubambiza Date: Wed, 29 Apr 2026 12:05:36 -0400 Subject: [PATCH 5/6] ci: Bump pinned SHA and rename job to verify-pr-title Assisted-By: Claude Opus 4.6 Signed-off-by: Gloire Rubambiza --- .github/workflows/pr-verifier.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pr-verifier.yml b/.github/workflows/pr-verifier.yml index d04a7fe..7babf5f 100644 --- a/.github/workflows/pr-verifier.yml +++ b/.github/workflows/pr-verifier.yml @@ -5,5 +5,5 @@ on: types: [opened, edited, synchronize, reopened] jobs: - verify: - uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@fccbcfaaadf24f180b4a754377ceff6d9e000297 + verify-pr-title: + uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@4e535f2436d167295d39d488ce5c44b5a2d49792 From 95bddf1c9c08ecbd5a69a7b03dbe3b4d71ab0b12 Mon Sep 17 00:00:00 2001 From: Gloire Rubambiza Date: Wed, 29 Apr 2026 12:12:05 -0400 Subject: [PATCH 6/6] ci: Add top-level permissions restriction Assisted-By: Claude Opus 4.6 Signed-off-by: Gloire Rubambiza --- .github/workflows/pr-verifier.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/pr-verifier.yml b/.github/workflows/pr-verifier.yml index 7babf5f..e2bfc8b 100644 --- a/.github/workflows/pr-verifier.yml +++ b/.github/workflows/pr-verifier.yml @@ -4,6 +4,8 @@ on: pull_request: types: [opened, edited, synchronize, reopened] +permissions: {} + jobs: verify-pr-title: uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@4e535f2436d167295d39d488ce5c44b5a2d49792