platform/blackroad-os-web
9
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ci): use pinned SHA hashes for all actions (#109)

Browse Source 
BlackRoad-OS org policy requires pinned commit SHAs for all actions.
Fixed self-healing.yml.
This commit is contained in:
Alexa Amundson
2026-02-23 20:01:23 -06:00
committed by GitHub
parent a0c031ea0a
commit 263f9f171e
1 changed files with 10 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
.github/workflows/self-healing.yml vendored
View File

@@ -19,29 +19,29 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
- name: Check Health
id: health
run: |
if [ -z "$DEPLOY_URL" ]; then
echo "::notice::DEPLOY_URL not set. Skipping health check."
echo "::notice::DEPLOY_URL not set. Skipping."
echo "status=skip" >> $GITHUB_OUTPUT
else
STATUS=$(curl -s -o /dev/null -w "%{http_code}" "$DEPLOY_URL/api/health" --max-time 30 || echo "000")
echo "status=$STATUS" >> $GITHUB_OUTPUT
[ "$STATUS" = "200" ] && echo "::notice::Health check passed" || echo "::warning::Health check returned $STATUS"
[ "$STATUS" = "200" ] && echo "::notice::Health OK" || echo "::warning::Health returned $STATUS"
fi
env:
DEPLOY_URL: ${{ secrets.DEPLOY_URL }}
- name: Create Issue on Failure
if: failure()
uses: actions/github-script@v7
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
with:
script: |
github.rest.issues.create({
owner: context.repo.owner,
repo: context.repo.repo,
title: '🚨 Self-Healing: Health Check Failed',
title: 'Self-Healing: Health Check Failed',
body: `Health check failed.\nWorkflow: ${context.workflow}\nRun: ${context.runId}`,
labels: ['bug', 'deployment', 'auto-generated']
})
@@ -51,15 +51,15 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
with:
fetch-depth: 0
- name: Setup Node
if: hashFiles('package.json') != ''
uses: actions/setup-node@v4
uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af
with:
node-version: '20'
- name: Update npm dependencies
- name: Update dependencies
if: hashFiles('package.json') != ''
run: |
npm update
@@ -73,9 +73,8 @@ jobs:
git commit -m "chore: auto-update npm dependencies $(date +%Y-%m-%d)"
git push origin "$BRANCH"
gh pr list --head "$BRANCH" --state open --json number --jq '.[0].number' | grep -q '^[0-9]' && \
echo "::notice::PR already exists for $BRANCH" || \
gh pr create \
--title "chore: auto-update npm dependencies $(date +%Y-%m-%d)" \
echo "::notice::PR already exists" || \
gh pr create --title "chore: auto-update npm deps $(date +%Y-%m-%d)" \
--body "Automated dependency update." \
--base main --head "$BRANCH" --label "dependencies" || true
else