Skip to content

fix(ci): pin claude-code-reusable workflow to SHA#224

Open
don-petry wants to merge 2 commits intomainfrom
claude/issue-155-20260420-0033
Open

fix(ci): pin claude-code-reusable workflow to SHA#224
don-petry wants to merge 2 commits intomainfrom
claude/issue-155-20260420-0033

Conversation

@don-petry
Copy link
Copy Markdown
Collaborator

Summary

  • Pin .github/workflows/claude.yml reusable workflow reference from tag @v1 to commit SHA ee22b427cbce9ecadcf2b436acb57c3adf0cb63d per the org action-pinning policy
  • Sync file with org template: add missing check_run: [completed] trigger

Change:
```yaml

Before

uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@v1

After

uses: petry-projects/.github@ee22b42 # v1
```

Closes #155

Generated with Claude Code

Pin reusable workflow reference from tag @v1 to commit SHA
ee22b427cbce9ecadcf2b436acb57c3adf0cb63d per org action-pinning policy.
Also sync template additions: add check_run trigger from org standard.

Closes #155

Co-authored-by: don-petry <don-petry@users.noreply.github.com>
Copilot AI review requested due to automatic review settings April 20, 2026 00:34
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Apr 20, 2026

Warning

Rate limit exceeded

@github-actions[bot] has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 46 minutes and 2 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 46 minutes and 2 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: c3318bde-768a-4259-8584-b47c8c6d715c

📥 Commits

Reviewing files that changed from the base of the PR and between 32e618b and d25f51c.

📒 Files selected for processing (1)
  • .github/workflows/claude.yml
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch claude/issue-155-20260420-0033

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@don-petry
Copy link
Copy Markdown
Collaborator Author

Self-review complete — the change is minimal and correct:

  • SHA ee22b427cbce9ecadcf2b436acb57c3adf0cb63d verified as the commit SHA for the v1 tag via gh api repos/petry-projects/.github/git/refs/tags/v1
  • # v1 comment retained for human readability
  • check_run: [completed] trigger added to sync with org template

@don-petry — you are listed in CODEOWNERS as the code owner for this repository. Please review and merge when ready.

@sonarqubecloud
Copy link
Copy Markdown

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Pins the org-level Claude Code reusable workflow reference to an immutable commit SHA to satisfy action-pinning compliance, and syncs the local thin-caller workflow triggers with the org template.

Changes:

  • Pin petry-projects/.github/.github/workflows/claude-code-reusable.yml from @v1 to a commit SHA.
  • Add missing check_run: [completed] trigger to align with the org template.

jobs:
claude-code:
uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@v1
uses: petry-projects/.github/.github/workflows/claude-code-reusable.yml@ee22b427cbce9ecadcf2b436acb57c3adf0cb63d # v1
Copy link

Copilot AI Apr 20, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The file header says you “MUST NOT change” the trigger events or the uses: line, but this PR necessarily updates both (pinning to a SHA and adding check_run). To avoid confusing future maintainers (and to align with the org action-pinning policy), please update the header guidance to explicitly allow syncing these fields from the upstream template / updating the pinned SHA.

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Compliance: unpinned-actions-claude.yml

2 participants