Skip to content

ci: pin Codespell workflow actions - #948

Open
fuyua9 wants to merge 1 commit into
AmazingAng:mainfrom
fuyua9:ci/pin-codespell-actions-current
Open

ci: pin Codespell workflow actions#948
fuyua9 wants to merge 1 commit into
AmazingAng:mainfrom
fuyua9:ci/pin-codespell-actions-current

Conversation

@fuyua9

@fuyua9 fuyua9 commented Aug 25, 2026

Copy link
Copy Markdown

What type of PR is this (这是什么类型的PR)

  • Typo(勘误)
  • BUG(程序错误)
  • Improvement(提升)
  • Feature(新特性)

Which issue(s) this PR fixes(Optional) (这个PR 修复了什么问题 (可选择))

  • resolve: #

What this PR does / Why we need it (这个PR 做了什么/ 我们为什么需要这个PR)

Pins the Codespell workflow actions to their verified immutable release commits. This prevents the workflow from following mutable action tags while updating actions/checkout to v4.2.2.

Validation:

  • git diff --check
  • Ruby YAML parsing for .github/workflows/codespell.yml
  • Verified both pinned SHAs against the upstream action tags via GitHub API

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant