test: verify pinned SHA for GitHub Actions allowlist - #5

Draft

stefanmatar wants to merge 1 commit into

mainfrom

test/verify-pinned-sha

stefanmatar commented Apr 2, 2026

Owner

Summary

Adds a test-sha-pin job that uses the exact commit SHA 378eef343ad063386431daa76ef16fc7e0ef9635 (v1.2.3) to verify it works when pinned by hash
This is to validate the SHA before adding it to the org-level patterns_allowed in the terraform repo
Draft PR — will be closed after CI passes


          test: verify pinned SHA for GitHub Actions allowlist

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet