Repository navigation
ci: pilot pinned actionlint workflow validation (#651) - #653
Merged
Merged
Conversation
This comment has been minimized.
This comment has been minimized.
Fooftilly
temporarily deployed
to
project-automation
October 13, 2026 21:17 — with 
GitHub Actions
Inactive
GitHub Actions
Inactive
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
Fooftilly
commented
Oct 13, 2026
Fooftilly
left a comment
Fooftilly
left a comment
Owner
Author
There was a problem hiding this comment.
Reviewed at 257815b. One finding inline (P3, advisory pilot only).
Checked and holding: the v1.7.12 linux_amd64 archive SHA-256 matches the release's actionlint_1.7.12_checksums.txt (8aca8db9…a3d8); the tarball has actionlint at its root, so tar … actionlint extracts correctly; the checkout pin matches zizmor.yml/codeql.yml (v7.0.1) with persist-credentials: false; and -shellcheck= -pyflakes= does disable both integrations. The new file itself lints clean.
This was referenced Oct 14, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
First A1 slice of #651: add a small, isolated actionlint workflow, without modifying backend, PostgreSQL schema, or existing CI gates.
continue-on-error) so existing workflow findings do not block the concurrent PostgreSQL migration. Emit an explicit warning when the lint step finds issues.Validation
.github/workflows/actionlint.ymland no overlapping active actionlint PR at branch creation.master@d8e1097557725549fc8561d2c39e3f2407740e48.e8ec665: actionlint pilot run 38511958845 succeeded. The pinned binary passed SHA-256 verification, actionlint completed without findings, and the advisory-warning step correctly skipped.concurrency.queuediagnostic (actionlint #654); treat actual lint findings as advisory while keeping actionlint execution errors fatal.After this pilot
Review output; fix real pre-existing workflow errors in separate focused PR(s), justify any explicit exceptions, and only then propose turning the actionlint step into a blocking check. Do not change branch protection or required check names as part of this PR.
Related: #651 (roadmap), #643 (cost-aware CI), #339 (dependency-aware workflow gates), existing CodeQL/zizmor.
Review/merge: Leave unmerged for the maintainer's explicit approval.