fix: update OSPO action references to canonical org path#1678
fix: update OSPO action references to canonical org path#1678zkoppert wants to merge 1 commit intoeyaltoledano:mainfrom
Conversation
The OSPO actions have moved from github/ to github.qkg1.topmunity-projects/. Update workflow references to use the canonical org path. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
|
📝 WalkthroughWalkthroughA GitHub Actions workflow is updated to replace the action reference from Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes 🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
🧹 Nitpick comments (1)
.github/workflows/weekly-metrics-discord.yml (1)
41-41: Consider pinningissue-metricsto a commit SHA instead of@v3.Update uses the canonical org path; for additional supply-chain safety, pin to an immutable commit SHA at Lines 41, 50, and 57. The latest v3 release is v3.25.5 (commit
67526e7):Suggested patch
- uses: github.qkg1.topmunity-projects/issue-metrics@v3 + uses: github.qkg1.topmunity-projects/issue-metrics@67526e7Apply this change to all three metric generation steps.
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed. In @.github/workflows/weekly-metrics-discord.yml at line 41, Replace the floating tag usage of the action "github.qkg1.topmunity-projects/issue-metrics@v3" with the immutable commit ref "github.qkg1.topmunity-projects/issue-metrics@67526e7" in all occurrences (the three metric-generation steps that use issue-metrics) so the workflow pins to the specific commit instead of the semver tag; update each "uses:" line where issue-metrics is referenced to the commit SHA.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Nitpick comments:
In @.github/workflows/weekly-metrics-discord.yml:
- Line 41: Replace the floating tag usage of the action
"github.qkg1.topmunity-projects/issue-metrics@v3" with the immutable commit ref
"github.qkg1.topmunity-projects/issue-metrics@67526e7" in all occurrences (the three
metric-generation steps that use issue-metrics) so the workflow pins to the
specific commit instead of the semver tag; update each "uses:" line where
issue-metrics is referenced to the commit SHA.
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: 1303be53-d67a-4b0d-b3b7-27f68e002584
📒 Files selected for processing (1)
.github/workflows/weekly-metrics-discord.yml
Updates GitHub Actions workflow references from the legacy
github/org path to the canonicalgithub.qkg1.topmunity-projects/path.The following OSPO actions have been transferred to the
github.qkg1.topmunity-projectsorganization:github/issue-metricsgithub.qkg1.topmunity-projects/issue-metricsWhile GitHub's repo redirect ensures the old paths still work today, updating to the canonical path avoids depending on the redirect and ensures long-term stability.
No functional changes - the same action versions are referenced.
Summary by CodeRabbit