Skip to content

🌱 chore: pin GitHub Actions to digest SHAs and replace setup-kind - #90

Merged
mikeshng merged 1 commit into
open-cluster-management-io:mainfrom
tesshuflower:pin-github-actions
Jun 16, 2026
Merged

🌱 chore: pin GitHub Actions to digest SHAs and replace setup-kind#90
mikeshng merged 1 commit into
open-cluster-management-io:mainfrom
tesshuflower:pin-github-actions

Conversation

@tesshuflower

@tesshuflower tesshuflower commented Jun 15, 2026

Copy link
Copy Markdown
Contributor

Pin all GitHub Actions to immutable commit SHAs to prevent supply chain issues from moving tags.

Replace engineerd/setup-kind with direct kind create cluster run steps using the kind binary pre-installed on GitHub-hosted runners. The Kubernetes node image version is now explicit via KUBERNETES_VERSION env variable set to v1.32.2 (same version previously used by kind v0.27.0 by default).

Similar to what we did in ocm: open-cluster-management-io/ocm#1572

Pin all GitHub Actions to immutable commit SHAs to prevent supply chain
issues from moving tags.

Replace engineerd/setup-kind with direct `kind create cluster` run steps
using the kind binary pre-installed on GitHub-hosted runners. The
Kubernetes node image version is now explicit via KUBERNETES_VERSION env
variable set to v1.32.2 (same version previously used by kind v0.27.0 by default).

Signed-off-by: Tesshu Flower <tflower@redhat.com>
@coderabbitai

coderabbitai Bot commented Jun 15, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@tesshuflower, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 51 minutes and 6 seconds. Learn how PR review limits work.

Your organization has used up its prepaid credits, and credit purchases are no longer available. Enable the review add-on in the billing tab to keep reviews running — you're only billed for reviews past your plan's rate limits ($0.25/file).

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: cf2db8a2-2a19-4c38-a8b5-9cd003099734

📥 Commits

Reviewing files that changed from the base of the PR and between ee20e44 and f657924.

📒 Files selected for processing (5)
  • .github/workflows/chart-upload.yml
  • .github/workflows/fossa.yml
  • .github/workflows/go-postsubmit.yml
  • .github/workflows/go-presubmit.yml
  • .github/workflows/go-release.yml
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@codecov

codecov Bot commented Jun 15, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 68.94%. Comparing base (ee20e44) to head (f657924).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #90   +/-   ##
=======================================
  Coverage   68.94%   68.94%           
=======================================
  Files           4        4           
  Lines         892      892           
=======================================
  Hits          615      615           
  Misses        243      243           
  Partials       34       34           
Flag Coverage Δ
unit 68.94% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@openshift-ci
openshift-ci Bot requested a review from elgnay June 15, 2026 20:11

@mikeshng mikeshng left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/approve

/lgtm

@openshift-ci

openshift-ci Bot commented Jun 16, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: mikeshng, tesshuflower
Once this PR has been reviewed and has the lgtm label, please assign elgnay for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@mikeshng
mikeshng merged commit 6a3e08a into open-cluster-management-io:main Jun 16, 2026
8 of 9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants