-
Notifications
You must be signed in to change notification settings - Fork 89
Pull requests: kubestellar/docs
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
🌱 [scanner] fix: add fork guard to pull_request_target workflows
ci-cd
dco-signoff: yes
Indicates the PR's author has signed the DCO.
size/XS
Denotes a PR that changes 0-9 lines, ignoring generated files.
yaml
#5955
opened Jun 18, 2026 by
clubanderson
Contributor
Loading…
Pin infra reusable workflows to immutable SHA and add pull_request_target fork guards
dco-signoff: no
Indicates the PR's author has not signed the DCO.
do-not-merge/work-in-progress
Indicates that a PR should not merge because it is a work in progress.
needs-ok-to-test
Indicates a PR that requires an org member to verify it is safe to test.
size/XS
Denotes a PR that changes 0-9 lines, ignoring generated files.
Guard privileged pull_request_target workflows from fork PRs
dco-signoff: no
Indicates the PR's author has not signed the DCO.
do-not-merge/work-in-progress
Indicates that a PR should not merge because it is a work in progress.
needs-ok-to-test
Indicates a PR that requires an org member to verify it is safe to test.
size/S
Denotes a PR that changes 10-29 lines, ignoring generated files.
Fix supply chain security: pin reusable workflows to SHA and add fork guard
dco-signoff: no
Indicates the PR's author has not signed the DCO.
do-not-merge/work-in-progress
Indicates that a PR should not merge because it is a work in progress.
needs-ok-to-test
Indicates a PR that requires an org member to verify it is safe to test.
size/XS
Denotes a PR that changes 0-9 lines, ignoring generated files.
🌱 [scanner] fix: pin workflow refs to immutable SHA and add fork guard
dco-signoff: no
Indicates the PR's author has not signed the DCO.
do-not-merge/work-in-progress
Indicates that a PR should not merge because it is a work in progress.
needs-ok-to-test
Indicates a PR that requires an org member to verify it is safe to test.
size/XS
Denotes a PR that changes 0-9 lines, ignoring generated files.
fix: pin kubestellar/infra reusable workflow refs to immutable SHA (fixes #5940, #5941)
dco-signoff: no
Indicates the PR's author has not signed the DCO.
do-not-merge/work-in-progress
Indicates that a PR should not merge because it is a work in progress.
needs-ok-to-test
Indicates a PR that requires an org member to verify it is safe to test.
size/XS
Denotes a PR that changes 0-9 lines, ignoring generated files.
Pin reusable workflow refs to immutable SHA (fixes #5940, #5941)
dco-signoff: no
Indicates the PR's author has not signed the DCO.
do-not-merge/work-in-progress
Indicates that a PR should not merge because it is a work in progress.
needs-ok-to-test
Indicates a PR that requires an org member to verify it is safe to test.
size/XS
Denotes a PR that changes 0-9 lines, ignoring generated files.
Security: pin infra reusable workflows to immutable SHA and add fork guards
dco-signoff: no
Indicates the PR's author has not signed the DCO.
do-not-merge/work-in-progress
Indicates that a PR should not merge because it is a work in progress.
needs-ok-to-test
Indicates a PR that requires an org member to verify it is safe to test.
size/XS
Denotes a PR that changes 0-9 lines, ignoring generated files.
[scanner] fix: pin kubestellar/infra reusable workflows to immutable commit SHA
dco-signoff: no
Indicates the PR's author has not signed the DCO.
do-not-merge/work-in-progress
Indicates that a PR should not merge because it is a work in progress.
needs-ok-to-test
Indicates a PR that requires an org member to verify it is safe to test.
size/XS
Denotes a PR that changes 0-9 lines, ignoring generated files.
Guard copilot automation workflow against fork PRs
dco-signoff: no
Indicates the PR's author has not signed the DCO.
do-not-merge/work-in-progress
Indicates that a PR should not merge because it is a work in progress.
needs-ok-to-test
Indicates a PR that requires an org member to verify it is safe to test.
size/S
Denotes a PR that changes 10-29 lines, ignoring generated files.
ProTip!
Adding no:label will show everything without a label.