Skip to content

ci: standardize workflow and action display names - #21

Merged
nicodes merged 2 commits into
mainfrom
audit/action-names-20261016
Oct 16, 2026
Merged

nicodes merged 2 commits into
mainfrom
audit/action-names-20261016

Conversation

@nicodes

@nicodes nicodes commented Oct 16, 2026 •

Copy link
Copy Markdown
Member

Use consistent workflow titles and explicit job/action-step display names. Job and step IDs, commands, permissions, triggers, workflow paths, artifact identities and inputs/outputs are unchanged.

Validation: actionlint 1.7.12, parsed before/after comparison of executable YAML, and deterministic naming-policy audit passed locally. Hosted CI must pass at the exact head before merge.

Required-check names: ci → Test. Migrate these exact settings only after replacement checks pass; preserve strict mode, GitHub App bindings and the number of required checks.

Workflow security guard selectors now use stable step IDs, action identities or release operations instead of display labels. The trusted checkout, SHA pinning, publication ordering and negative security assertions remain enforced. Focused guard checks pass locally; full hosted CI remains required.

@nicodes
nicodes merged commit 4d476e9 into main Oct 16, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant