mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-10-27 05:57:27 +00:00
pulse-triage[bot]
be6179c2d2
Dependabot #2094, #2095 and #2096 bump actions/setup-go 6.4.0 -> 7.0.0, signpath/github-action-submit-signing-request 2 -> 3.0 and actions/github-script 8.0.0 -> 9.0.0. Each proposal is blocked only by the reviewed pin constants, the workflow-trust allowlist, the release-consumer action manifest and the installer governance assertions that hard-code the previous revisions. Carry all three bumps with those artifacts in one commit so the proposals can be closed as superseded. All three actions keep the node24 runtime and their existing inputs and outputs; no consumer interface, installer behaviour or public contract changes. The deployment-installability and agent-lifecycle workflow references are pin-only. Contract-Neutral: Reviewed action pin refresh with identical node24 consumer interfaces and unchanged inputs/outputs; no public-contract or installer-behaviour delta. Change-source: pulse-maintainer
50 lines
1.6 KiB
YAML
50 lines
1.6 KiB
YAML
name: UUID layout diagnostic (not qualification)
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
expected_workflow_sha:
|
|
description: Full reviewed main SHA containing this diagnostic
|
|
required: true
|
|
type: string
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: uuid-layout-diagnostic
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
diagnostic:
|
|
if: github.repository == 'rcourtman/Pulse' && github.ref == 'refs/heads/main'
|
|
runs-on: ubuntu-24.04
|
|
timeout-minutes: 45
|
|
steps:
|
|
- name: Bind execution to reviewed workflow source
|
|
env:
|
|
EXPECTED_SHA: ${{ inputs.expected_workflow_sha }}
|
|
run: |
|
|
set -euo pipefail
|
|
[[ "$EXPECTED_SHA" =~ ^[0-9a-f]{40}$ ]]
|
|
[[ "$GITHUB_SHA" == "$EXPECTED_SHA" ]]
|
|
[[ "$GITHUB_RUN_ATTEMPT" == 1 ]]
|
|
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
with:
|
|
persist-credentials: false
|
|
fetch-depth: 0
|
|
- uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
|
|
with:
|
|
go-version: '1.26.7'
|
|
cache: false
|
|
- name: Collect fixed four-condition UUID evidence
|
|
run: python3 scripts/diagnose-uuid-layout.py --output uuid-layout-evidence
|
|
- name: Retain partial or complete diagnostic evidence only
|
|
if: always()
|
|
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
|
with:
|
|
name: uuid-layout-diagnostic-${{ github.run_id }}-${{ github.run_attempt }}
|
|
path: uuid-layout-evidence/
|
|
if-no-files-found: warn
|
|
retention-days: 30
|