Skip to content

ci: pin claude-code-action to commit SHA - #1309

Merged
dangrondahl merged 1 commit into
mainfrom
ci/pin-claude-code-action-sha
Oct 27, 2026
Merged

dangrondahl merged 1 commit into
mainfrom
ci/pin-claude-code-action-sha

Conversation

@dangrondahl

Copy link
Copy Markdown
Contributor

Pins anthropics/claude-code-action in claude-pr-review.yml to the commit SHA behind v1.0.262 instead of the mutable tag, matching how step-security/harden-runner is pinned. The # v1.0.262 comment keeps Dependabot able to bump SHA and version together.

v1.0.262 is an annotated tag; the pinned SHA 925afb53776cf1a2b738c6bdbed37b4d4000ef13 is the dereferenced commit, not the tag object.

Checklist

  • Docs are autogenerated from CLI help — make sure the help text reflects your changes (n/a)
  • Helm chart (charts/k8s-reporter/) updated, if needed. Note: these changes live in a separate PR (n/a)
  • Terraform provider and related changes updated, if needed (n/a)

@dangrondahl
dangrondahl merged commit 56d23c8 into main Oct 27, 2026
21 checks passed
@dangrondahl
dangrondahl deleted the ci/pin-claude-code-action-sha branch October 27, 2026 12:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants