Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
197 commits
Select commit Hold shift + click to select a range
5684fc7
Daily merge from stage to main
Oct 13, 2025
10fcddf
Daily merge from stage to main
Oct 14, 2025
66a4cae
Daily merge from stage to main
Oct 15, 2025
3866dcd
Daily merge from stage to main
Oct 16, 2025
a462399
Daily merge from stage to main
Oct 17, 2025
d06a645
Daily merge from stage to main
Oct 18, 2025
a60db65
Daily merge from stage to main
Oct 21, 2025
59275ad
Daily merge from stage to main
Oct 22, 2025
2031ff5
Daily merge from stage to main
Oct 23, 2025
1e55895
Daily merge from stage to main
Oct 24, 2025
9747f1b
Daily merge from stage to main
Oct 24, 2025
6fd41e6
Daily merge from stage to main
Oct 24, 2025
4f07259
Daily merge from stage to main
Oct 31, 2025
7343d6c
Daily merge from stage to main
Nov 1, 2025
51cafcc
Daily merge from stage to main
Nov 5, 2025
2725911
Daily merge from stage to main
Nov 5, 2025
1c02a4c
Daily merge from stage to main
Nov 7, 2025
f3a301a
Daily merge from stage to main
Nov 8, 2025
0085e15
Daily merge from stage to main
Nov 9, 2025
1b36489
Daily merge from stage to main
Nov 10, 2025
03dc2af
Daily merge from stage to main
Nov 11, 2025
d5ea844
Daily merge from stage to main
Nov 11, 2025
908086e
Daily merge from stage to main
Nov 11, 2025
a836ef5
Daily merge from stage to main
Nov 12, 2025
92adca6
Daily merge from stage to main
Nov 14, 2025
2def76d
Daily merge from stage to main
Nov 15, 2025
65cdec2
Daily merge from stage to main
Nov 16, 2025
d6c846e
Daily merge from stage to main
Nov 17, 2025
4382d3a
Daily merge from stage to main
Nov 18, 2025
262b995
Daily merge from stage to main
Nov 18, 2025
2c11936
Daily merge from stage to main
Nov 20, 2025
f83b5e3
Daily merge from stage to main
Nov 21, 2025
554127a
Daily merge from stage to main
Nov 22, 2025
39f186d
Daily merge from stage to main
Nov 23, 2025
1a6b5a5
Daily merge from stage to main
Nov 24, 2025
b959644
Daily merge from stage to main
Nov 25, 2025
961151d
Daily merge from stage to main
Nov 26, 2025
b3d89da
Daily merge from stage to main
Nov 26, 2025
a964b83
Daily merge from stage to main
Nov 27, 2025
47f1e11
Daily merge from stage to main
Nov 29, 2025
a9a3de0
Daily merge from stage to main
Nov 30, 2025
dc8b42d
Daily merge from stage to main
Dec 1, 2025
a069b13
Daily merge from stage to main
Dec 2, 2025
27a43a3
Daily merge from stage to main
Dec 2, 2025
5db8d91
Daily merge from stage to main
Dec 4, 2025
1665918
Daily merge from stage to main
Dec 5, 2025
bd9e5c8
Daily merge from stage to main
Dec 6, 2025
06f671f
Daily merge from stage to main
Dec 8, 2025
a45357f
Daily merge from stage to main
Dec 9, 2025
b7382d4
Daily merge from stage to main
Dec 10, 2025
55f7ec1
Daily merge from stage to main
Dec 11, 2025
3ced52b
Daily merge from stage to main
Dec 12, 2025
5f60679
Daily merge from stage to main
Dec 13, 2025
ae69111
Daily merge from stage to main
Dec 16, 2025
23f94f4
Daily merge from stage to main
Dec 17, 2025
4e6d161
Daily merge from stage to main
Dec 18, 2025
41bc400
Daily merge from stage to main
Dec 18, 2025
eeb5805
Daily merge from stage to main
Dec 19, 2025
ecaf8a1
Daily merge from stage to main
Dec 20, 2025
02cbbfe
Daily merge from stage to main
Dec 24, 2025
e1540d3
Daily merge from stage to main
Dec 30, 2025
08d9566
Daily merge from stage to main
Dec 31, 2025
33235e2
Daily merge from stage to main
Jan 5, 2026
0d29578
Daily merge from stage to main
Jan 6, 2026
45599a0
Daily merge from stage to main
Jan 6, 2026
959e482
Daily merge from stage to main
Jan 6, 2026
1cc5950
Daily merge from stage to main
Jan 6, 2026
23f4025
Daily merge from stage to main
Jan 7, 2026
faa3693
Daily merge from stage to main
Jan 7, 2026
eb25521
Daily merge from stage to main
Jan 7, 2026
7a5df53
Daily merge from stage to main
Jan 7, 2026
a675e09
Daily merge from stage to main
Jan 7, 2026
cac3963
Daily merge from stage to main
Jan 7, 2026
e028515
Daily merge from stage to main
Jan 8, 2026
d0977f3
Daily merge from stage to main
Jan 8, 2026
145a2a3
Daily merge from stage to main
Jan 8, 2026
3620b93
Daily merge from stage to main
Jan 9, 2026
01c050b
Daily merge from stage to main
Jan 10, 2026
97aa89e
Daily merge from stage to main
Jan 12, 2026
1b9219d
Daily merge from stage to main
Jan 13, 2026
b43344c
Daily merge from stage to main
Jan 13, 2026
8f61002
Daily merge from stage to main
Jan 13, 2026
00e7d43
Daily merge from stage to main
Jan 14, 2026
cb984a5
Daily merge from stage to main
Jan 15, 2026
3e6f266
Daily merge from stage to main
Jan 16, 2026
91bb4ff
Daily merge from stage to main
Jan 17, 2026
93fc161
Daily merge from stage to main
Jan 19, 2026
0a9a180
Daily merge from stage to main
Jan 20, 2026
3ad6042
Daily merge from stage to main
Jan 21, 2026
296a545
Daily merge from stage to main
Jan 22, 2026
7b51ef0
Daily merge from stage to main
Jan 23, 2026
385814c
Daily merge from stage to main
Jan 24, 2026
716fe30
Daily merge from stage to main
Jan 26, 2026
3072f82
Daily merge from stage to main
Jan 27, 2026
969b39f
Daily merge from stage to main
Jan 28, 2026
30f7d10
Daily merge from stage to main
Jan 29, 2026
dc8c37e
Daily merge from stage to main
Jan 30, 2026
aa907ac
Daily merge from stage to main
Jan 31, 2026
6507020
Daily merge from stage to main
Feb 1, 2026
b1a14bb
Daily merge from stage to main
Feb 3, 2026
5dc1246
Daily merge from stage to main
Feb 3, 2026
4228f6c
Daily merge from stage to main
Feb 4, 2026
46864dc
Daily merge from stage to main
Feb 5, 2026
f4e87b5
Daily merge from stage to main
Feb 6, 2026
d62e770
Daily merge from stage to main
Feb 7, 2026
201d06c
Daily merge from stage to main
Feb 9, 2026
363423a
Daily merge from stage to main
Feb 10, 2026
5a50e71
Daily merge from stage to main
Feb 10, 2026
d2be6fe
Daily merge from stage to main
Feb 12, 2026
64c6f1f
Daily merge from stage to main
Feb 13, 2026
95aae37
Daily merge from stage to main
Feb 14, 2026
802e243
Daily merge from stage to main
Feb 18, 2026
57a5d48
Daily merge from stage to main
Feb 19, 2026
fd67a18
Daily merge from stage to main
Feb 20, 2026
deadfc6
Daily merge from stage to main
Feb 21, 2026
00bccbc
Daily merge from stage to main
Feb 24, 2026
1ef9750
Daily merge from stage to main
Feb 25, 2026
fa24550
Daily merge from stage to main
Feb 26, 2026
9c3a1b2
Daily merge from stage to main
Feb 27, 2026
9044049
Daily merge from stage to main
Feb 28, 2026
a01c8c6
Daily merge from stage to main
Mar 2, 2026
cdc84c6
Daily merge from stage to main
Mar 3, 2026
f55f032
Daily merge from stage to main
Mar 3, 2026
3c5822e
Daily merge from stage to main
Mar 4, 2026
f59d521
Daily merge from stage to main
Mar 5, 2026
285040a
Daily merge from stage to main
Mar 6, 2026
8907ee0
Daily merge from stage to main
Mar 6, 2026
4146a31
Daily merge from stage to main
Mar 10, 2026
95f5c63
Daily merge from stage to main
Mar 10, 2026
c3f80ec
Daily merge from stage to main
Mar 11, 2026
6bf2422
Daily merge from stage to main
Mar 12, 2026
3621e61
Daily merge from stage to main
Mar 13, 2026
b274873
Daily merge from stage to main
Mar 13, 2026
a4a36ad
Daily merge from stage to main
Mar 13, 2026
38c3252
Daily merge from stage to main
Mar 13, 2026
eb45b11
Daily merge from stage to main
Mar 14, 2026
0ff7095
Daily merge from stage to main
Mar 17, 2026
dd353a7
Daily merge from stage to main
Mar 17, 2026
5592ac8
Daily merge from stage to main
Mar 18, 2026
262e8b8
Daily merge from stage to main
Mar 19, 2026
0ca7a49
Daily merge from stage to main
Mar 20, 2026
7491497
Daily merge from stage to main
Mar 21, 2026
be10ead
Daily merge from stage to main
Mar 24, 2026
c02f7c0
Daily merge from stage to main
Mar 24, 2026
9985fc5
Daily merge from stage to main
Mar 24, 2026
d38e666
Daily merge from stage to main
Mar 24, 2026
3665433
Daily merge from stage to main
Mar 26, 2026
4e162f2
Daily merge from stage to main
Mar 27, 2026
7e96335
Daily merge from stage to main
Mar 28, 2026
57e9616
Daily merge from stage to main
Mar 30, 2026
586851b
Daily merge from stage to main
Mar 31, 2026
56f6049
Daily merge from stage to main
Mar 31, 2026
97e5be1
Daily merge from stage to main
Apr 1, 2026
0da4ae9
Daily merge from stage to main
Apr 2, 2026
e90c253
Daily merge from stage to main
Apr 3, 2026
a7ec0b5
Daily merge from stage to main
Apr 4, 2026
6653c2a
Daily merge from stage to main
Apr 7, 2026
e636c69
Daily merge from stage to main
Apr 8, 2026
9213f93
Daily merge from stage to main
Apr 9, 2026
2e9cc5e
Daily merge from stage to main
Apr 10, 2026
abc59fe
Daily merge from stage to main
Apr 11, 2026
53e77f9
Daily merge from stage to main
Apr 14, 2026
ceb0983
Daily merge from stage to main
Apr 15, 2026
45318f1
Daily merge from stage to main
Apr 16, 2026
f3e4829
Daily merge from stage to main
Apr 17, 2026
f05c35c
Daily merge from stage to main
Apr 18, 2026
ac6d243
Daily merge from stage to main
Apr 19, 2026
2e33830
Daily merge from stage to main
Apr 20, 2026
9238bee
Daily merge from stage to main
Apr 21, 2026
9e8a19b
Daily merge from stage to main
Apr 21, 2026
08e0dfd
Daily merge from stage to main
Apr 21, 2026
de8dc40
Daily merge from stage to main
Apr 22, 2026
2b30f04
Daily merge from stage to main
Apr 23, 2026
60890e3
Daily merge from stage to main
Apr 24, 2026
032d2b5
Daily merge from stage to main
Apr 24, 2026
dfd60e1
Daily merge from stage to main
Apr 26, 2026
00e4439
Daily merge from stage to main
Apr 27, 2026
a405e29
Daily merge from stage to main
Apr 28, 2026
683d992
Daily merge from stage to main
Apr 29, 2026
e84d392
Daily merge from stage to main
Apr 30, 2026
7a81595
Daily merge from stage to main
May 2, 2026
472cf03
Daily merge from stage to main
May 5, 2026
c1ef407
Daily merge from stage to main
May 6, 2026
18518f9
Daily merge from stage to main
May 7, 2026
897fa60
Daily merge from stage to main
May 8, 2026
c6fa7f0
Daily merge from stage to main
May 9, 2026
565c6a6
Daily merge from stage to main
May 12, 2026
eebfb79
Daily merge from stage to main
May 13, 2026
af9028c
Daily merge from stage to main
May 14, 2026
d5457bb
Daily merge from stage to main
May 15, 2026
ea5e2f7
Daily merge from stage to main
May 16, 2026
53a0f72
Daily merge from stage to main
May 19, 2026
7c2fc75
Daily merge from stage to main
May 19, 2026
4705cb7
Daily merge from stage to main
May 19, 2026
e9f5aed
Daily merge from stage to main
May 20, 2026
c018b25
Merge remote-tracking branch 'origin/stage' into stage
Daniel-ADFA May 25, 2026
269bf2a
ADFA-3989: fix missing AWS CLI from weekly release
Daniel-ADFA May 26, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 5 additions & 4 deletions .github/workflows/weekly-release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,6 @@ jobs:
steps:
- uses: actions/checkout@v4
with:
ref: main
fetch-depth: 0
persist-credentials: false

Expand Down Expand Up @@ -79,7 +78,6 @@ jobs:
steps:
- uses: actions/checkout@v4
with:
ref: main
persist-credentials: false

- name: Reset staging directory
Expand Down Expand Up @@ -185,7 +183,6 @@ jobs:
steps:
- uses: actions/checkout@v4
with:
ref: main
fetch-depth: 0
persist-credentials: false

Expand Down Expand Up @@ -228,6 +225,10 @@ jobs:
AWS_SECRET_ACCESS_KEY: ${{ secrets.CLOUDFLARE_SECRET_ACCESS_KEY }}
AWS_DEFAULT_REGION: auto
steps:
- uses: actions/checkout@v4
with:
persist-credentials: false
Comment on lines +228 to +230
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Verify unpinned GitHub Actions references in workflow files.
# Expected after fix: no output for the updated line.
rg -nP '^\s*-\s+uses:\s+\S+@(?!(?:[0-9a-f]{40})\b)\S+' .github/workflows

Repository: appdevforall/CodeOnTheGo

Length of output: 519


Pin actions/checkout to an immutable commit SHA (multiple occurrences).

Unpinned actions/checkout@v4 is used in:

  • .github/workflows/weekly-release.yml at lines 23, 79, 184, 228, 271
  • .github/workflows/release-plugin-api.yml at line 20

Use a vetted 40-char commit SHA instead of the mutable tag.

Suggested change
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@<audited-actions-checkout-v4-sha>
         with:
           persist-credentials: false
🧰 Tools
🪛 zizmor (1.25.2)

[error] 228-228: unpinned action reference (unpinned-uses): action is not pinned to a hash (required by blanket policy)

(unpinned-uses)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.github/workflows/weekly-release.yml around lines 228 - 230, Replace all
mutable references to "uses: actions/checkout@v4" in the workflows with a vetted
40-character commit SHA (e.g. "actions/checkout@<40-char-sha>"); find each
occurrence of the literal "uses: actions/checkout@v4" and substitute the tag
with the immutable commit SHA, keeping the step parameters (like
persist-credentials) unchanged, and ensure every occurrence is updated
consistently across all workflow files.


- name: Download APK artifact
uses: actions/download-artifact@v4
with:
Expand All @@ -251,6 +252,7 @@ jobs:
echo "Prepared: $DEST"

- name: Upload to Cloudflare R2 (apk-repo bucket)
shell: flox activate -d flox/base -- bash -eo pipefail {0}
env:
R2_ACCOUNT_ID: ${{ vars.CLOUDFLARE_ACCOUNT_ID }}
DEST: ${{ steps.rename.outputs.dest }}
Expand All @@ -268,7 +270,6 @@ jobs:
steps:
- uses: actions/checkout@v4
with:
ref: main
persist-credentials: false

- name: Close Jira version (idempotent)
Expand Down
135 changes: 135 additions & 0 deletions flox/base/.flox/env/manifest.lock
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,9 @@
"android-studio-tools": {
"pkg-path": "android-studio-tools"
},
"awscli2": {
"pkg-path": "awscli2"
},
"gh": {
"pkg-path": "gh"
},
Expand Down Expand Up @@ -157,6 +160,138 @@
"group": "toplevel",
"priority": 5
},
{
"attr_path": "awscli2",
"broken": false,
"derivation": "/nix/store/v5gxglicwhyknfwswhngrbawzdwnapp5-awscli2-2.27.2.drv",
"description": "Unified tool to manage your AWS services",
"install_id": "awscli2",
"license": "Apache-2.0",
"locked_url": "https://github.com/flox/nixpkgs?rev=4faa5f5321320e49a78ae7848582f684d64783e9",
"name": "awscli2-2.27.2",
"pname": "awscli2",
"rev": "4faa5f5321320e49a78ae7848582f684d64783e9",
"rev_count": 806853,
"rev_date": "2025-05-27T18:28:29Z",
"scrape_date": "2025-05-29T04:22:26.435939Z",
"stabilities": [
"unstable",
"staging",
"stable",
"lts"
],
"unfree": false,
"version": "2.27.2",
"outputs_to_install": [
"out"
],
"outputs": {
"dist": "/nix/store/sc270lyggbhz78lcxh9khqmggayqpp6i-awscli2-2.27.2-dist",
"out": "/nix/store/b5fa0fplfpiyx8zwc9y7d08a57lsk229-awscli2-2.27.2"
},
"system": "aarch64-darwin",
"group": "toplevel",
"priority": 5
},
{
"attr_path": "awscli2",
"broken": false,
"derivation": "/nix/store/7ykn42yxjf7ncyl2z00700hq214xs4jn-awscli2-2.27.2.drv",
"description": "Unified tool to manage your AWS services",
"install_id": "awscli2",
"license": "Apache-2.0",
"locked_url": "https://github.com/flox/nixpkgs?rev=4faa5f5321320e49a78ae7848582f684d64783e9",
"name": "awscli2-2.27.2",
"pname": "awscli2",
"rev": "4faa5f5321320e49a78ae7848582f684d64783e9",
"rev_count": 806853,
"rev_date": "2025-05-27T18:28:29Z",
"scrape_date": "2025-05-29T04:39:56.495925Z",
"stabilities": [
"unstable",
"staging",
"stable",
"lts"
],
"unfree": false,
"version": "2.27.2",
"outputs_to_install": [
"out"
],
"outputs": {
"dist": "/nix/store/ss8xqzwn1l8qdbwlml439bx1ik13vxlk-awscli2-2.27.2-dist",
"out": "/nix/store/161s22pbddllc4mabgr5rvrpmhiffsp4-awscli2-2.27.2"
},
"system": "aarch64-linux",
"group": "toplevel",
"priority": 5
},
{
"attr_path": "awscli2",
"broken": false,
"derivation": "/nix/store/id7b0p6cwlkcsnfb767s820ig9xj0qnp-awscli2-2.27.2.drv",
"description": "Unified tool to manage your AWS services",
"install_id": "awscli2",
"license": "Apache-2.0",
"locked_url": "https://github.com/flox/nixpkgs?rev=4faa5f5321320e49a78ae7848582f684d64783e9",
"name": "awscli2-2.27.2",
"pname": "awscli2",
"rev": "4faa5f5321320e49a78ae7848582f684d64783e9",
"rev_count": 806853,
"rev_date": "2025-05-27T18:28:29Z",
"scrape_date": "2025-05-29T04:56:01.820295Z",
"stabilities": [
"unstable",
"staging",
"stable",
"lts"
],
"unfree": false,
"version": "2.27.2",
"outputs_to_install": [
"out"
],
"outputs": {
"dist": "/nix/store/q9rzj2ikpl9vn4sns3ydsy7i8sachnha-awscli2-2.27.2-dist",
"out": "/nix/store/l18j8wgidf145m0zw6ydg8blim44hrkq-awscli2-2.27.2"
},
"system": "x86_64-darwin",
"group": "toplevel",
"priority": 5
},
{
"attr_path": "awscli2",
"broken": false,
"derivation": "/nix/store/j2ajkr3y4c0fg9lxl22z30hd4spb74d9-awscli2-2.27.2.drv",
"description": "Unified tool to manage your AWS services",
"install_id": "awscli2",
"license": "Apache-2.0",
"locked_url": "https://github.com/flox/nixpkgs?rev=4faa5f5321320e49a78ae7848582f684d64783e9",
"name": "awscli2-2.27.2",
"pname": "awscli2",
"rev": "4faa5f5321320e49a78ae7848582f684d64783e9",
"rev_count": 806853,
"rev_date": "2025-05-27T18:28:29Z",
"scrape_date": "2025-05-29T05:14:30.638052Z",
"stabilities": [
"unstable",
"staging",
"stable",
"lts"
],
"unfree": false,
"version": "2.27.2",
"outputs_to_install": [
"out"
],
"outputs": {
"dist": "/nix/store/r5cw3141myaf5lnzra9c0nc8prb2zv6y-awscli2-2.27.2-dist",
"out": "/nix/store/gx3hx0b3lbm11sishxl4k7a7ha4w405q-awscli2-2.27.2"
},
"system": "x86_64-linux",
"group": "toplevel",
"priority": 5
},
{
"attr_path": "gh",
"broken": false,
Expand Down
1 change: 1 addition & 0 deletions flox/base/.flox/env/manifest.toml
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,7 @@ version = 1
jdk17.pkg-path = "jdk17"
android-studio-tools.pkg-path = "android-studio-tools"
gh.pkg-path = "gh"
awscli2.pkg-path = "awscli2"
# gum.pkg-path = "gum"
# gum.version = "^0.14.5"

Expand Down
Loading