objectionary / objectionary/lints
Several CI workflows execute actions from moving master branches
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 14
- Forks
- 39
- Avg merge
- 22h 54m
- Merged PRs (30d)
- 90
Description
The Lints workflows execute volodya-lombrozo/pdd-action@master, g4s8/xcop-action@master, ludeeus/action-shellcheck@master, and appleboy/telegram-action@master.
Moving external branches can change the result of an unchanged commit and makes historical CI failures impossible to reproduce from the repository state.
Expected result:
Pin every action to an immutable release tag or commit SHA and update those references through reviewed changes.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the Lints workflow files that reference volodya-lombrozo/pdd-action, g4s8/xcop-action, ludeeus/action-shellcheck, and appleboy/telegram-action. Replace each moving master reference with an immutable release tag or commit SHA, then run the affected workflows or CI checks to confirm they still execute successfully.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions
- Domain
- ci-cd, security
- Issue type
- Refactor
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 72/100