Skip to content

ci: fix self-repository references - #8823

Merged
jack-berg merged 1 commit into
open-telemetry:mainfrom
opentelemetrybot:zizmor-remediation/self-repository-20260914
Sep 15, 2026
Merged

jack-berg merged 1 commit into
open-telemetry:mainfrom
opentelemetrybot:zizmor-remediation/self-repository-20260914

Conversation

@opentelemetrybot

@opentelemetrybot opentelemetrybot commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

Use GitHub's dedicated $/... syntax for same-repository actions and reusable workflows so zizmor no longer reports self-repository findings.

Update the shared Scorecard workflow to v0.14.0, which filters the corresponding Scorecard false positives.

Strict all-level enforcement is staged in open-telemetry/admin#891.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The syntax is valid, and the pinned SHA matches the documented v0.14.0 release.

Pull request overview

Updates CI workflow references to satisfy zizmor’s self-repository checks.

Changes:

  • Uses GitHub’s $/... syntax for local reusable workflows.
  • Updates the shared Scorecard workflow to v0.14.0.
File summaries
File Description
.github/workflows/ossf-scorecard.yml Pins Scorecard workflow v0.14.0.
.github/workflows/build.yml Updates the local link-check reference.
.github/workflows/build-daily.yml Updates the daily link-check reference.
Review details
  • Files reviewed: 3/3 changed files
  • Comments generated: 0
  • Review effort level: Balanced

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@opentelemetrybot
opentelemetrybot marked this pull request as ready for review September 15, 2026 02:19
@opentelemetrybot
opentelemetrybot requested a review from a team as a code owner September 15, 2026 02:19
@codecov

codecov Bot commented Sep 15, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.27%. Comparing base (dd579ae) to head (15786b8).

Additional details and impacted files
@@             Coverage Diff              @@
##               main    #8823      +/-   ##
============================================
- Coverage     91.28%   91.27%   -0.01%     
  Complexity    10533    10533              
============================================
  Files          1008     1008              
  Lines         28481    28481              
  Branches       3620     3620              
============================================
- Hits          25998    25996       -2     
  Misses         1685     1685              
- Partials        798      800       +2     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@jack-berg
jack-berg merged commit c1649ab into open-telemetry:main Sep 15, 2026
35 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants