From 20b2c0639c7c2cc013fa5da3b42a18d5e38594e7 Mon Sep 17 00:00:00 2001 From: CL Date: Thu, 15 Oct 2026 16:04:49 +0100 Subject: [PATCH] Rename the pin check to "Action pin check" "Action pins are immutable" stopped being true when the check began accepting this repository's major-version tag, which moves by design. The new name says what the job is without claiming every reference is immutable. The README example and the action's own name follow, so callers copying the example use the new job name. This repository's ruleset requires no status checks by name, so nothing else changes here; each caller's ruleset changes with that caller's rename. --- .github/workflows/premerge.yaml | 2 +- README.md | 2 +- actions/action-pins/action.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/premerge.yaml b/.github/workflows/premerge.yaml index 515593f..3061d7a 100644 --- a/.github/workflows/premerge.yaml +++ b/.github/workflows/premerge.yaml @@ -19,7 +19,7 @@ jobs: # request that makes it. `actions/` holds the composite actions, whose `uses:` steps need # the same pins as any workflow's. runs-on: [ubuntu-latest] - name: Action pins are immutable + name: Action pin check timeout-minutes: 5 steps: - name: Check out source repository diff --git a/README.md b/README.md index bf83a57..7dfb57a 100644 --- a/README.md +++ b/README.md @@ -26,7 +26,7 @@ jobs: action-pins: runs-on: [ubuntu-latest] - name: Action pins are immutable + name: Action pin check timeout-minutes: 5 steps: - uses: actions/checkout@ # vX.Y.Z diff --git a/actions/action-pins/action.yml b/actions/action-pins/action.yml index 9eb901c..4546453 100644 --- a/actions/action-pins/action.yml +++ b/actions/action-pins/action.yml @@ -1,4 +1,4 @@ -name: 'Action pins are immutable' +name: 'Action pin check' description: 'Fail when any `uses:` in the checked-out repository names something other than a full 40-hex commit SHA, or a version tag of L337-org/github-workflows.' # A tag or branch ref can be repointed by the action's owner at any time, so `@v7` means CI runs