Skip to content

Fix stale workflow failure by updating actions/stale reference #33

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
SharkyBytes merged 1 commit into from
Mar 21, 2026
Merged

Fix stale workflow failure by updating actions/stale reference #33

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/stale.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ jobs:

steps:
- name: Mark stale issues and PRs
uses: actions/stale@9d5a0b4d7a0d8b4f2c5e7d5b8a6c2a3f7a2b1c9d
uses: actions/stale@v10
Copy link

@coderabbitai coderabbitai bot Mar 20, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

ref_json="$(curl -fsSL https://api.github.com/repos/actions/stale/git/ref/tags/v10)"
obj_type="$(jq -r '.object.type' <<<"$ref_json")"
obj_sha="$(jq -r '.object.sha' <<<"$ref_json")"

if [ "$obj_type" = "tag" ]; then
  commit_sha="$(curl -fsSL "https://api.github.com/repos/actions/stale/git/tags/$obj_sha" | jq -r '.object.sha')"
else
  commit_sha="$obj_sha"
fi

echo "Resolved actions/stale@v10 commit SHA: $commit_sha"
echo "Update .github/workflows/stale.yml to:"
echo "uses: actions/stale@$commit_sha"

Repository: AOSSIE-Org/SmartNotes

Length of output: 244

🏁 Script executed:

cat -n .github/workflows/stale.yml | sed -n '15,25p'

Repository: AOSSIE-Org/SmartNotes

Length of output: 387

Pin actions/stale to a commit SHA instead of the mutable tag v10.

Using the major version tag @v10 on line 18 allows the reference to be retargeted, introducing supply chain risk. Pin to the exact commit SHA for reproducibility and security.

The v10 release resolves to commit b5d41d4e1d5dceea10e7104786b73624c18a190f. Update the workflow:

Suggested change 
-        uses: actions/stale@v10
+        uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
uses: actions/stale@v10
uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f
🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In @.github/workflows/stale.yml at line 18, Replace the mutable tag reference
"uses: actions/stale@v10" with the exact commit SHA to pin the action for
reproducibility and security; update the workflow line that currently references
actions/stale@v10 to use the provided commit SHA
(b5d41d4e1d5dceea10e7104786b73624c18a190f) so the "uses: actions/stale" entry is
anchored to that specific commit.

with:
repo-token: ${{ secrets.GITHUB_TOKEN }}

Expand Down
Loading