Skip to content

chore(ci): pin claude-review action to full commit SHA (#243) - #395

Merged
thomasluizon merged 1 commit into
mainfrom
chore/api-pin-review-action-sha
Jul 14, 2026
Merged

chore(ci): pin claude-review action to full commit SHA (#243)#395
thomasluizon merged 1 commit into
mainfrom
chore/api-pin-review-action-sha

Conversation

@thomasluizon

Copy link
Copy Markdown
Owner

Pins the review action to a full commit SHA to resolve the SonarCloud security hotspot (supply-chain). NOTE: editing claude-review.yml makes claude-code-action self-skip, so the review check reports without posting — this PR needs an admin merge. Refs thomasluizon/orbit-ui-mobile#243

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@sonarqubecloud

Copy link
Copy Markdown

@thomasluizon
thomasluizon merged commit 378a3a0 into main Jul 14, 2026
19 checks passed
@thomasluizon
thomasluizon deleted the chore/api-pin-review-action-sha branch July 14, 2026 01:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant