Skip to content

Update golangci/golangci-lint-action digest to ba0d7d2 #954

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mshaposhnik merged 1 commit into from
Sep 3, 2026
Merged

Update golangci/golangci-lint-action digest to ba0d7d2 #954

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/go-ci.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ jobs:
echo "version=$(grep 'GOLANGCI_LINT_VERSION ?=' Makefile | sed -e 's:GOLANGCI_LINT_VERSION ?= \(.*\):\1:' -)" \
>> $GITHUB_OUTPUT
- name: Lint with golang-ci
uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9
uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9

@fullsend-ai-review fullsend-ai-review Bot Jun 29, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

This PR modifies a file under the .github/ protected path. The PR has no linked issue providing authorization for changes to governance/infrastructure files. While the change itself is a routine Renovate digest update for golangci/golangci-lint-action, protected-path changes always require human review and approval.

Suggested fix: A maintainer should verify the digest update is legitimate and approve. No code changes are needed — this finding ensures human oversight of CI infrastructure changes.

@fullsend-ai-review fullsend-ai-review Bot Aug 3, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

This file is under the .github/ protected path. The PR has no linked issue providing authorization for modifying governance/infrastructure files. Human approval is required for all protected-path changes.

Suggested fix: Ensure a human reviewer explicitly approves this change.

with:
version: ${{ steps.golangci_version.outputs.version }}
args: "--timeout=10m --build-tags='normal periodic' --output.sarif.path=out/go-lint.sarif"
Expand Down
Loading