Skip to content

ci: use shared PR audit workflow#175

Open
mablr wants to merge 1 commit into
tempoxyz:mainfrom
mablr:mablr/shared-pr-audit
Open

ci: use shared PR audit workflow#175
mablr wants to merge 1 commit into
tempoxyz:mainfrom
mablr:mablr/shared-pr-audit

Conversation

@mablr

@mablr mablr commented Jul 13, 2026

Copy link
Copy Markdown

Summary

  • Publish PR audit events through the shared pr-audit workflow.
  • Preserve the existing admin-only trigger check.
  • Pin the reusable workflow to a full commit SHA and narrow workflow permissions.

Validation

  • actionlint .github/workflows/pr-audit.yml

Part of OSS-541

@mablr
mablr marked this pull request as ready for review July 13, 2026 10:14
mattsse
mattsse previously approved these changes Jul 13, 2026
@mattsse
mattsse dismissed their stale review July 13, 2026 10:29

Retracting approval after validating the pinned shared workflow in production: tempoxyz/zones Actions run 29231499231 resolves the audit target but event publishing fails with curl exit 3 because the new EVENTS_ARGS handling is incompatible with the current secret format. Please fix the shared workflow, update the pinned SHA, and rerun validation.

@figtracer figtracer left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@mablr
mablr force-pushed the mablr/shared-pr-audit branch from a68a9b4 to ed18fae Compare July 14, 2026 14:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants