ci: pin GitHub Actions to commit SHAs#5
Conversation
Pin actions/checkout, actions/setup-node, and codecov-action to full commit SHAs (matching the pins used across the cisco-*-mcp repos) so the repo can enforce sha_pinning_required (action hash lock).
|
Warning Review limit reached
More reviews will be available in 28 minutes and 11 seconds. Learn how PR review limits work. Your organization has run out of usage credits. Purchase more in the billing tab. ⌛ How to resolve this issue?After more reviews become available, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available. Please see our Fair Usage Limits Policy for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Organization UI Review profile: ASSERTIVE Plan: Pro Plus Run ID: 📒 Files selected for processing (2)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
1 participant
Pins
actions/checkout(34e1148),actions/setup-node(49933ea), andcodecov/codecov-action(75cd116) to full commit SHAs — the same vetted pins used acrosscisco-phone-mcp/cisco-cucm-mcp.Prerequisite for enabling
sha_pinning_required(the action hash lock) on this repo; without it, enforcement would fail CI on the next run.