Skip to content

fix(actions): refactor gh actions to fix CI - #8098

Open
cx-artur-ribeiro wants to merge 35 commits into
masterfrom
update-actions
Open

fix(actions): refactor gh actions to fix CI#8098
cx-artur-ribeiro wants to merge 35 commits into
masterfrom
update-actions

Conversation

@cx-artur-ribeiro

@cx-artur-ribeiro cx-artur-ribeiro commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

Reason for Proposed Changes

  • Update CI with new security policies;
  • Update release process with new security policies;

Proposed Changes

  • Updated all dockerfiles under docker/ with pinned versions and removal of dead code/package installation from images that already contain all packages needed;
  • Removed deprecated release actions;
  • Updated actions with new registry - echo;
  • Fix all Zizmor lint issues on actions;

I submit this contribution under the Apache-2.0 license.

@cx-artur-ribeiro cx-artur-ribeiro self-assigned this Aug 12, 2026
@stepsecurity-app

stepsecurity-app Bot commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

Resolved — a later workflow run passed this policy check.

Original alert (resolved)

Security Policy Alert: Secret Policy Violation

This workflow run has been blocked by StepSecurity's secrets policy because it accesses secrets and the workflow file differs from the default branch.

Secret references detected:

  • secrets.STEP_SECURITY_API_KEY at line 64
  • secrets.GITHUB_TOKEN at line 144

To approve this workflow, please add the workflows-approved label to this PR.

Note: The label must be added by someone other than the PR author (cx-artur-ribeiro) or automation bots to ensure proper security review.

After the label is added, you can re-run the blocked workflow to proceed.

This workflow will be automatically approved once merged into the default branch.

For more information, see StepSecurity's Secret Exfiltration Policy documentation.

@cx-artur-ribeiro
cx-artur-ribeiro marked this pull request as ready for review August 19, 2026 09:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants