From e536d138d10e0fdaf86804518da10c8a35f8778b Mon Sep 17 00:00:00 2001 From: Gloire Rubambiza Date: Tue, 28 Apr 2026 10:19:40 -0400 Subject: [PATCH 1/6] ci: Add PR verifier caller workflow Assisted-By: Claude Opus 4.6 Signed-off-by: Gloire Rubambiza --- .github/workflows/pr-verifier.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .github/workflows/pr-verifier.yml diff --git a/.github/workflows/pr-verifier.yml b/.github/workflows/pr-verifier.yml new file mode 100644 index 0000000..5eb4758 --- /dev/null +++ b/.github/workflows/pr-verifier.yml @@ -0,0 +1,10 @@ +name: PR Verifier + +on: + pull_request: + types: [opened, edited, synchronize, reopened] + +jobs: + verify: + uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@main + From afc5ac7c6161563239c7b08efc1bc1751e2d6cfe Mon Sep 17 00:00:00 2001 From: Gloire Rubambiza Date: Tue, 28 Apr 2026 10:29:49 -0400 Subject: [PATCH 2/6] ci: Pin reusable workflow to SHA Assisted-By: Claude Opus 4.6 Signed-off-by: Gloire Rubambiza --- .github/workflows/pr-verifier.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pr-verifier.yml b/.github/workflows/pr-verifier.yml index 5eb4758..85526ff 100644 --- a/.github/workflows/pr-verifier.yml +++ b/.github/workflows/pr-verifier.yml @@ -6,5 +6,5 @@ on: jobs: verify: - uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@main + uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@ae31c56d344b1efc6ef174338c488b1e355649bc From e2c69a2af96a4d774b9f19a3b9b61f025c5ef785 Mon Sep 17 00:00:00 2001 From: Gloire Rubambiza Date: Tue, 28 Apr 2026 14:24:56 -0400 Subject: [PATCH 3/6] ci: Update pinned SHA to include action fix Assisted-By: Claude Opus 4.6 Signed-off-by: Gloire Rubambiza --- .github/workflows/pr-verifier.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pr-verifier.yml b/.github/workflows/pr-verifier.yml index 85526ff..16341fb 100644 --- a/.github/workflows/pr-verifier.yml +++ b/.github/workflows/pr-verifier.yml @@ -6,5 +6,5 @@ on: jobs: verify: - uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@ae31c56d344b1efc6ef174338c488b1e355649bc + uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@fccbcfaaadf24f180b4a754377ceff6d9e000297 From 12aef818947a9b7f9fb1f5d859c1a70dc22fe5c6 Mon Sep 17 00:00:00 2001 From: Gloire Rubambiza Date: Wed, 29 Apr 2026 08:52:02 -0400 Subject: [PATCH 4/6] ci: Fix trailing newline in pr-verifier.yml Assisted-By: Claude Opus 4.6 Signed-off-by: Gloire Rubambiza --- .github/workflows/pr-verifier.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/pr-verifier.yml b/.github/workflows/pr-verifier.yml index 16341fb..d04a7fe 100644 --- a/.github/workflows/pr-verifier.yml +++ b/.github/workflows/pr-verifier.yml @@ -7,4 +7,3 @@ on: jobs: verify: uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@fccbcfaaadf24f180b4a754377ceff6d9e000297 - From aeb8b8e1b3ea4d03b3afdfd065df507913c03086 Mon Sep 17 00:00:00 2001 From: Gloire Rubambiza Date: Wed, 29 Apr 2026 12:05:34 -0400 Subject: [PATCH 5/6] ci: Bump pinned SHA and rename job to verify-pr-title Assisted-By: Claude Opus 4.6 Signed-off-by: Gloire Rubambiza --- .github/workflows/pr-verifier.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pr-verifier.yml b/.github/workflows/pr-verifier.yml index d04a7fe..7babf5f 100644 --- a/.github/workflows/pr-verifier.yml +++ b/.github/workflows/pr-verifier.yml @@ -5,5 +5,5 @@ on: types: [opened, edited, synchronize, reopened] jobs: - verify: - uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@fccbcfaaadf24f180b4a754377ceff6d9e000297 + verify-pr-title: + uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@4e535f2436d167295d39d488ce5c44b5a2d49792 From bc87d657588557f0d5499ce815755f789a3ad301 Mon Sep 17 00:00:00 2001 From: Gloire Rubambiza Date: Wed, 29 Apr 2026 12:12:04 -0400 Subject: [PATCH 6/6] ci: Add top-level permissions restriction Assisted-By: Claude Opus 4.6 Signed-off-by: Gloire Rubambiza --- .github/workflows/pr-verifier.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/pr-verifier.yml b/.github/workflows/pr-verifier.yml index 7babf5f..e2bfc8b 100644 --- a/.github/workflows/pr-verifier.yml +++ b/.github/workflows/pr-verifier.yml @@ -4,6 +4,8 @@ on: pull_request: types: [opened, edited, synchronize, reopened] +permissions: {} + jobs: verify-pr-title: uses: kagenti/.github/.github/workflows/pr-verifier-required.yml@4e535f2436d167295d39d488ce5c44b5a2d49792