Skip to content
Lockdown untrusted workflows

Install Shadow PR review bot #1

Sign in to view logs

Install Shadow PR review bot

Install Shadow PR review bot #1

Triggered via push May 31, 2026 20:45
@sudsalisudsali
pushed bb22f38
develop
Status Failure
Total duration 8s
Artifacts –

secure_workflows.yml

on: push
Harden Security
5s
Harden Security
Fit to window
Zoom out
Zoom in

Annotations

2 errors
Harden Security
At least one workflow or composite action contains an unpinned GitHub Action version.
Harden Security
sudsali/shadow/.github/workflows/shadow-review.yml@v0 is not pinned to a full length commit SHA.