From d587d1f0895865a84151302b43956cb2cccbc6e4 Mon Sep 17 00:00:00 2001 From: Takashi Masuda Date: Wed, 12 Aug 2026 13:17:16 +0900 Subject: [PATCH 1/2] chore: Remove unused pinact configuration - SHA pinning is covered by ghalint's action_ref_should_be_full_length_commit_sha - pinact is not run locally either --- .pinact.yaml | 8 -------- 1 file changed, 8 deletions(-) delete mode 100644 .pinact.yaml diff --git a/.pinact.yaml b/.pinact.yaml deleted file mode 100644 index cc768d8..0000000 --- a/.pinact.yaml +++ /dev/null @@ -1,8 +0,0 @@ -# yaml-language-server: $schema=https://raw.githubusercontent.com/suzuki-shunsuke/pinact/refs/heads/main/json-schema/pinact.json -# pinact - https://github.com/suzuki-shunsuke/pinact - -version: 3 - -ignore_actions: - - name: masutaka/.* - ref: main From 95932ba5db41febde1f616e31d76aaad6f2c001a Mon Sep 17 00:00:00 2001 From: Takashi Masuda Date: Wed, 12 Aug 2026 13:17:28 +0900 Subject: [PATCH 2/2] chore: Fix action-shellcheck version comment - The actual tag of ludeeus/action-shellcheck is 2.0.0; v2.0.0 does not exist - Detected by zizmor's ref-version-mismatch audit --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d5141af..11472e7 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -27,7 +27,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # v2.0.0 + - uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # 2.0.0 pushover: name: pushover if failure if: github.ref_name == github.event.repository.default_branch && failure()