Skip to content

ci: enforce workflow policy - #49

Merged
francoischalifour merged 1 commit into
altertable-ai:mainfrom
albert20260301:ci/workflow-policy-20260805
Aug 5, 2026
Merged

francoischalifour merged 1 commit into
altertable-ai:mainfrom
albert20260301:ci/workflow-policy-20260805

Conversation

@albert20260301

Copy link
Copy Markdown
Contributor

Summary

  • pin Linux jobs to ubuntu-24.04
  • pin third-party GitHub Actions to immutable commit SHAs with reviewed version comments

Impact

This changes CI and release automation only; it does not change the SDK API, package contents, or release versions.

Validation

  • bash scripts/validate-workflow-policy.sh <repository-root>
  • git diff --check

The repository test suite could not run in this maintenance environment: Ruby and Python test runners are unavailable, while Go integration tests require Docker. GitHub CI will run the repository-native checks.

Cross-SDK scope

The same policy audit found equivalent drift across the SDK inventory. This PR is deliberately limited to one repository to keep review and rollback isolated.

@albert20260301

Copy link
Copy Markdown
Contributor Author

@redox could you review this?

I picked you because recent workflow and release commits in this Ruby repository point to your ownership. CI is pending. The main focus is that runner/action pinning preserves the existing release and test behavior.

@francoischalifour
francoischalifour merged commit c159071 into altertable-ai:main Aug 5, 2026
8 checks passed
@albert20260301
albert20260301 deleted the ci/workflow-policy-20260805 branch August 5, 2026 08:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants