Skip to content

ci: consolidate workflow validation - #206

Draft
figtracer wants to merge 2 commits into
tempoxyz:mainfrom
figtracer:fig/oss-545-workflow-validation
Draft

ci: consolidate workflow validation#206
figtracer wants to merge 2 commits into
tempoxyz:mainfrom
figtracer:fig/oss-545-workflow-validation

Conversation

@figtracer

Copy link
Copy Markdown
Contributor

Consolidates zizmor, actionlint, and action pin policy into the shared Tempo workflow-validation job. Repository-specific exceptions remain documented locally and limited to immutable SHA references, including the changelog action commit bound to PyPI's OIDC policy.

This draft overlaps with #175 on .pinact.yaml and will be rebased after that PR merges, retaining the combined exception policy.

Part of OSS-545.

Comment thread .pinact.yaml Outdated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants