From cf998944713e00ce422833a7d5e7acb6ea6b4f8f Mon Sep 17 00:00:00 2001 From: Raffael Sahli Date: Mon, 7 Sep 2026 09:44:03 +0200 Subject: [PATCH] ci: remove superseded ensure actions pin job DK-5938 --- .github/workflows/pr-actions.yaml | 27 --------------------------- 1 file changed, 27 deletions(-) delete mode 100644 .github/workflows/pr-actions.yaml diff --git a/.github/workflows/pr-actions.yaml b/.github/workflows/pr-actions.yaml deleted file mode 100644 index 6d0b24b2..00000000 --- a/.github/workflows/pr-actions.yaml +++ /dev/null @@ -1,27 +0,0 @@ -name: pr-actions - -permissions: {} - -on: - pull_request: - branches: - - 'master' - -jobs: - ensure-sha-pinned: - runs-on: ubuntu-latest - steps: - - name: Harden Runner - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 - with: - egress-policy: audit - - - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - name: Ensure SHA pinned actions - uses: zgosalvez/github-actions-ensure-sha-pinned-actions@c5fc58bd0be7a4b94b73ce40250322d5b838a108 # v5.0.7 - with: - # slsa-github-generator requires using a semver tag for reusable workflows. - # See: https://github.com/slsa-framework/slsa-github-generator#referencing-slsa-builders-and-generators - allowlist: | - slsa-framework/slsa-github-generator