Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Github Workflow cleanup#26193

Merged
TravisEz13 merged 2 commits into
PowerShell:masterPowerShell/PowerShell:masterfrom
TravisEz13:gh-workflow-cleanupTravisEz13/PowerShell:gh-workflow-cleanupCopy head branch name to clipboard
Oct 15, 2025
Merged

Github Workflow cleanup#26193
TravisEz13 merged 2 commits into
PowerShell:masterPowerShell/PowerShell:masterfrom
TravisEz13:gh-workflow-cleanupTravisEz13/PowerShell:gh-workflow-cleanupCopy head branch name to clipboard

Conversation

@TravisEz13

Copy link
Copy Markdown
Member

PR Summary

This pull request removes several GitHub Actions workflow files related to automation and continuous integration, and updates scripts to pin downloads to a specific commit for enhanced security. The main focus is on cleaning up unused or deprecated workflows and improving the security posture by ensuring scripts are fetched from a known commit.

Workflow cleanup and deprecation:

  • Deleted multiple GitHub Actions workflow files, including those for auto-assigning PR maintainers (AssignPrs.yml), creating and processing reminders (createReminders.yml, processReminders.yml), and markdown link checking (markdownLink.yml, markdownLinkDaily.yml). This removes automation for PR assignment, reminders, and markdown validation. [1] [2] [3] [4] [5]

Security improvements:

  • Updated tools/download.sh to pin the download of install-powershell.sh to a specific commit (26bb188c8be0cda6cb548ce1a12840ebf67e1331) for compliance with OpenSSF Scorecard requirements, ensuring that scripts are fetched from a trusted and immutable source.
  • Modified tools/install-powershell.sh to use the same pinned commit for downloading resources, further enforcing script integrity and traceability.

PR Context

  • Remove use of 3rd party GitHub actions in Pull Request workflows
  • Fix other security issues

PR Checklist

@TravisEz13 TravisEz13 requested review from a team and jshigetomi as code owners October 14, 2025 21:14
@xtqqczze

Copy link
Copy Markdown
Contributor

Super-linter is maintained by @zkoppert who works for GitHub, so isn't this a first party action?

@daxian-dbw daxian-dbw added the CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log label Oct 15, 2025
@TravisEz13

Copy link
Copy Markdown
Member Author

/azp run PowerShell-CI-linux-packaging, PowerShell-Windows-Packaging-CI

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines could not run because the pipeline triggers exclude this branch/path.

@TravisEz13 TravisEz13 added the Compliance Related to compliance requirements label Oct 15, 2025
@TravisEz13 TravisEz13 enabled auto-merge (squash) October 15, 2025 19:33
@TravisEz13 TravisEz13 merged commit 0e90b57 into PowerShell:master Oct 15, 2025
35 of 36 checks passed
@TravisEz13 TravisEz13 deleted the gh-workflow-cleanup branch October 15, 2025 19:33
@microsoft-github-policy-service

microsoft-github-policy-service Bot commented Oct 15, 2025

Copy link
Copy Markdown
Contributor

📣 Hey @@TravisEz13, how did we do? We would love to hear your feedback with the link below! 🗣️

🔗 https://aka.ms/PSRepoFeedback

@TravisEz13

TravisEz13 commented Oct 17, 2025

Copy link
Copy Markdown
Member Author

#26219 Created to add some functionality back

SIRMARGIN pushed a commit to SIRMARGIN/PowerShell that referenced this pull request Dec 12, 2025
kilasuit pushed a commit to kilasuit/PowerShell that referenced this pull request Jan 2, 2026
JustinGrote pushed a commit to JustinGrote/PowerShell that referenced this pull request Jun 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Backport-7.4.x-Done Backport-7.5.x-Done Backport-7.6.x-Done CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log Compliance Related to compliance requirements

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

Morty Proxy This is a proxified and sanitized view of the page, visit original site.