Skip to content

Commit 78d9d7f

Browse files
fix(ci): restore the required owner_id/repo_id metadata in actions.lock (#73)
The Hypatia repin (#72) regenerated the lockfile with a helper of mine that wrote the 8 transitive pins in the wrong shape: `ref` + `commit` but no `owner_id`/`repo_id`, which the validator requires. lockfile is unreadable: .github/workflows/actions.lock: line 139, column 5: missing required action field "owner_id" for dependency "actions/cache@55cc8345..." This adds the 8 missing pairs, fetched from the API. `gh actions-lock --verify` now passes locally (rc=0, 13 workflows scanned). The helper has been fixed so it cannot emit this shape again.
1 parent 0bad773 commit 78d9d7f

1 file changed

Lines changed: 16 additions & 0 deletions

File tree

.github/workflows/actions.lock

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -139,24 +139,40 @@ dependencies:
139139
'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9':
140140
ref: 'v6.1.0'
141141
commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
142+
owner_id: 44036562
143+
repo_id: 215566462
142144
'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1':
143145
ref: 'v7.0.1'
144146
commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
147+
owner_id: 44036562
148+
repo_id: 197814629
145149
'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a':
146150
ref: 'v7.0.1'
147151
commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
152+
owner_id: 44036562
153+
repo_id: 192625955
148154
'dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772':
149155
ref: 'stable'
150156
commit: 'sha1-6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772'
157+
owner_id: 1940490
158+
repo_id: 260749683
151159
'editorconfig-checker/action-editorconfig-checker@840e866d93b8e032123c23bac69dece044d4d84c':
152160
ref: 'v2.2.0'
153161
commit: 'sha1-840e866d93b8e032123c23bac69dece044d4d84c'
162+
owner_id: 26415196
163+
repo_id: 297874902
154164
'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124':
155165
ref: 'v1.24.1'
156166
commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124'
167+
owner_id: 47606891
168+
repo_id: 331103973
157169
'ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc':
158170
ref: 'v2.4.4'
159171
commit: 'sha1-2d1146689b8cda280b9bc96326124645441f03bc'
172+
owner_id: 67707773
173+
repo_id: 421101922
160174
'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555':
161175
ref: 'v0.10.0'
162176
commit: 'sha1-e83874834305fe9a4a2997156cb26c5de65a8555'
177+
owner_id: 135788
178+
repo_id: 208510314

0 commit comments

Comments
 (0)