[release/v7.6] Github Workflow cleanup#26439
Merged
TravisEz13 merged 1 commit intoPowerShell:release/v7.6from Nov 13, 2025
Merged
[release/v7.6] Github Workflow cleanup#26439TravisEz13 merged 1 commit intoPowerShell:release/v7.6from
TravisEz13 merged 1 commit intoPowerShell:release/v7.6from
Conversation
TravisEz13
added
the
CL-BuildPackaging
Contributor
There was a problem hiding this comment.
Pull Request Overview
This PR backports GitHub Actions workflow cleanup changes from the master branch to the release/v7.6 branch. The changes improve security posture by pinning script downloads to specific commits (OpenSSF Scorecard requirement) and remove deprecated GitHub Actions workflows that are no longer in use.
- Pins
install-powershell.shanddownload.shscript references to a specific commit hash for security compliance - Removes five deprecated GitHub Actions workflows (AssignPrs, createReminders, processReminders, markdownLink, markdownLinkDaily)
- Includes a minor whitespace cleanup fix in install-powershell.sh
Reviewed Changes
Copilot reviewed 7 out of 7 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| tools/install-powershell.sh | Updates gitreposubpath variable to use pinned commit hash instead of master branch reference; includes trailing whitespace fix |
| tools/download.sh | Adds commit pinning to the install-powershell.sh download URL |
| .github/workflows/processReminders.yml | Removes deprecated workflow for processing issue/PR reminders |
| .github/workflows/markdownLinkDaily.yml | Removes deprecated daily markdown link verification workflow |
| .github/workflows/markdownLink.yml | Removes deprecated PR markdown link and lint checking workflow |
| .github/workflows/createReminders.yml | Removes deprecated workflow for creating reminders from issue comments |
| .github/workflows/AssignPrs.yml | Removes deprecated auto-assign PR maintainer workflow |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
adityapatwardhan
approved these changes
Nov 13, 2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Backport of #26193 to release/v7.6
Triggered by @TravisEz13 on behalf of @TravisEz13
Original CL Label: CL-BuildPackaging
/cc @PowerShell/powershell-maintainers
Impact
REQUIRED: Choose either Tooling Impact or Customer Impact (or both). At least one checkbox must be selected.
Tooling Impact
Removes deprecated GitHub Actions workflows (AssignPrs, createReminders, processReminders, markdownLink) and pins script downloads to specific commits for OpenSSF Scorecard compliance. Affects CI/CD security and workflow automation.
Customer Impact
Regression
REQUIRED: Check exactly one box.
This is not a regression.
Testing
Verified by running affected workflows in fork. Confirmed builds complete successfully and deprecated workflows are removed.
Risk
REQUIRED: Check exactly one box.
High risk as it modifies build infrastructure by removing deprecated GitHub Actions workflows and updating script download pinning. However, necessary to maintain security posture and remove unused automation. Changes validated in master branch since October 2025.