From fedb666ec2bea46b2d7a1db3a7192368b4773653 Mon Sep 17 00:00:00 2001 From: Claude Date: Tue, 29 Sep 2026 23:34:34 +0000 Subject: [PATCH] ci: pin the shared AI review workflow to a commit A change to the .github workflow now only takes effect here through a reviewed PR that bumps the SHA. Co-Authored-By: Claude Opus 5.5 (1M context) Claude-Session: https://claude.ai/code/session_011yoL2D46V9c74Q9aJXgXZu --- .github/workflows/ai-review.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ai-review.yml b/.github/workflows/ai-review.yml index bb92c58..459b12a 100644 --- a/.github/workflows/ai-review.yml +++ b/.github/workflows/ai-review.yml @@ -3,6 +3,9 @@ # # pull_request_target runs this file from the base branch, so a PR cannot # edit or delete its own review. +# +# The reusable workflow is pinned to a commit, so a change to it only takes +# effect here through a reviewed PR that bumps the SHA. name: AI Review @@ -21,7 +24,7 @@ permissions: jobs: ai-review: - uses: mirurobotics/.github/.github/workflows/ai-review.yml@main + uses: mirurobotics/.github/.github/workflows/ai-review.yml@78e2fba753ddf238696af92184931ee08d3b0016 with: runs-on: ubuntu-latest secrets: