Skip to content

chore(deps): pin workos/actions action to 5c7450a - #712

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions-pins
Open

chore(deps): pin workos/actions action to 5c7450a#712
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions-pins

Conversation

@renovate

@renovate renovate Bot commented Aug 15, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
workos/actions action pinDigest 5c7450a

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • "on the 15th day of the month before 12pm"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested review from a team as code owners August 15, 2026 01:47
@renovate
renovate Bot requested a review from awolfden August 15, 2026 01:47
@renovate
renovate Bot enabled auto-merge (squash) August 15, 2026 01:47
@greptile-apps

greptile-apps Bot commented Aug 15, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

Pins the workos/actions reusable workflow to an immutable commit instead of the mutable main branch, narrowing the workflow supply-chain trust boundary.

  • Replaces @main with the full commit SHA 5c7450a04f5a182b346eae2d833b869e337b12bb.
  • Preserves the reusable workflow path and existing SDK_BOT_PRIVATE_KEY secret mapping.

Confidence Score: 5/5

The PR appears safe to merge because it only replaces a mutable reusable-workflow reference with an immutable commit pin.

The workflow path and secret mapping remain unchanged, the pin follows the repository’s established full-SHA convention, and no concrete blocking or non-blocking defect was identified.

Important Files Changed

Filename Overview
.github/workflows/block-generated-edits.yml Pins the existing reusable workflow reference to a full commit SHA without changing its path, triggers, job structure, or secret contract.

Reviews (1): Last reviewed commit: "chore(deps): pin workos/actions action t..." | Re-trigger Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

0 participants