Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

Add PR validation workflow to ensure issue linkage and QA approval - #30

#30
Open
mm-psy wants to merge 37 commits into
developmm-psy/AAS.TwinEngine.DataEngine:developfrom
feature/pr-validatormm-psy/AAS.TwinEngine.DataEngine:feature/pr-validatorCopy head branch name to clipboard
Open

Add PR validation workflow to ensure issue linkage and QA approval#30
mm-psy wants to merge 37 commits into
developmm-psy/AAS.TwinEngine.DataEngine:developfrom
feature/pr-validatormm-psy/AAS.TwinEngine.DataEngine:feature/pr-validatorCopy head branch name to clipboard

Conversation

@mm-psy

@mm-psy mm-psy commented Feb 5, 2026

Copy link
Copy Markdown
Owner

No description provided.

mm-psy added 3 commits January 27, 2026 15:37
@mm-psy
Dev fix trivy (#22)
8112659 
* Fix image reference extraction for Trivy SBOM generation in Docker publish workflow

* Add step to extract first image tag for Trivy scanning in Docker publish workflow
@mm-psy
Dev fix trivy + tag rework (#23)
049a654 
* Fix image reference extraction for Trivy SBOM generation in Docker publish workflow

* Add step to extract first image tag for Trivy scanning in Docker publish workflow

* Fix manual trigger value format in Docker publish workflow

* Fix tag generation logic for Docker image based on branch conditions

* Enhance tag generation logic for Docker image by adding priority to develop branch tags

* Fix tag generation logic for non-develop and non-release branches in Docker publish workflow
@mm-psy
Add PR validation workflow to ensure issue linkage and QA approval
c40880b
@github-actions

github-actions Bot commented Feb 5, 2026 •
edited
Loading

Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

.github/workflows/pr-validator.yml

PackageVersionLicenseIssue Type
actions/create-github-app-token2.*.*NullUnknown License
Allowed Licenses: Apache-1.0, Apache-1.1, Apache-2.0, BSL-1.0, BSD-1-Clause, BSD-2-Clause, BSD-2-Clause-FreeBSD, BSD-2-Clause-NetBSD, BSD-3-Clause, BSD-3-Clause-Clear, BSD-3-Clause-No-Nuclear-License, BSD-3-Clause-No-Nuclear-License-2014, BSD-3-Clause-No-Nuclear-Warranty, BSD-3-Clause-Open-MPI, BSD-4-Clause, BSD-Protection, BSD-Source-Code, BSD-3-Clause-Attribution, 0BSD, BSD-2-Clause-Patent, BSD-4-Clause-UC, MIT-CMU, CC-BY-3.0, CC-BY-SA-1.0, CC-BY-SA-2.0, CC-BY-SA-2.5, CC-BY-SA-3.0, CC-BY-SA-4.0, CC0-1.0, WTFPL, MIT-enna, MIT-feh, ISC, JSON, BSD-3-Clause-LBNL, MITNFA, MIT, MIT-0, UPL-1.0, NCSA, X11, Xerox, BlueOak-1.0.0, CC-BY-4.0, MS-PL, PostgreSQL, Python-2.0, SSPL-1.0, OFL-1.1, Unlicense, Unicode-DFS-2016, Unicode-3.0
Excluded from license check: pkg:nuget/AasCore.Aas3_0, pkg:nuget/AasCore.Aas3.Package

OpenSSF Scorecard

PackageVersionScoreDetails
actions/actions/create-github-app-token 2.*.* 🟢 6.2
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/11 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Maintained🟢 1015 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 9security policy file detected
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits

Scanned Files

  • .github/workflows/pr-validator.yml

@mm-psy mm-psy linked an issue Feb 5, 2026 that may be closed by this pull request
Test PBI #31
Open
@mm-psy mm-psy removed a link to an issue Feb 5, 2026
Test PBI #31
Open
@mm-psy mm-psy linked an issue Feb 5, 2026 that may be closed by this pull request
Test PBI #31
Open
@mm-psy mm-psy removed a link to an issue Feb 5, 2026
Test PBI #31
Open
@mm-psy mm-psy linked an issue Feb 5, 2026 that may be closed by this pull request
Test PBI #31
Open
mm-psy added 10 commits February 5, 2026 15:38
@mm-psy
Refactor GraphQL query construction for issue project field checks in…
98ad4e6 
… PR validation
@mm-psy
Refactor project field check logic in PR validation to improve accuracy
a854ef4
@mm-psy
Refactor project name variable in PR validation workflow for consistency
276e6dd
@mm-psy
Refactor GraphQL query for project field checks to improve accuracy i…
a91b18d 
…n PR validation
@mm-psy
Refactor project field check logic in PR validation to streamline iss…
bc775df 
…ue project verification
@mm-psy
Refactor custom field validation in PR workflow to enhance clarity an…
1cd17fd 
…d accuracy
@mm-psy
Refactor project field value extraction in PR validation for improved…
536f477 
… clarity
@mm-psy
Refactor project field selection in PR validation to enhance query st…
889e43f 
…ructure
@mm-psy
Remove custom field validation step from PR workflow to streamline va…
85c4dd5 
…lidation process
@mm-psy
Refactor PR issue linking logic to simplify query and improve clarity
40c06b1
@mm-psy

mm-psy commented Feb 18, 2026

Copy link
Copy Markdown
Owner Author

Hello

@mm-psy
mm-psy marked this pull request as draft February 18, 2026 09:34
@mm-psy
mm-psy marked this pull request as ready for review February 18, 2026 09:34
@mm-psy
mm-psy force-pushed the develop branch 2 times, most recently from 2974f96 to f081ef6 Compare February 23, 2026 10:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Test PBI

1 participant

@mm-psy
Morty Proxy This is a proxified and sanitized view of the page, visit original site.