Skip to content

ci: migrate to approved-actions + add workflow permissions - #8

Draft
raphaelhagi wants to merge 2 commits into
mainfrom
ci/migrate-to-approved-actions
Draft

ci: migrate to approved-actions + add workflow permissions#8
raphaelhagi wants to merge 2 commits into
mainfrom
ci/migrate-to-approved-actions

Conversation

@raphaelhagi

@raphaelhagi raphaelhagi commented Aug 6, 2026

Copy link
Copy Markdown

Migração para Approved-Actions

Migra as actions de terceiros para stone-payments/approved-actions@stable e adiciona permissions: explícitas.

Resumo

Categoria Qtd
Migradas (terceiros) 6 (6 ocorrências)
Anotadas p/ revisão manual (terceiros sem wrapper) 0
Internas da Stone (ignoradas) 0
Workflows com permissions: adicionado 2

✅ Actions migradas (terceiros)

Workflow Antes Depois Tipo de ref
spell-checking.yaml actions/checkout@v4 stone-payments/approved-actions/actions/checkout/v4@stable major tag
spell-checking.yaml actions/setup-node@v4 stone-payments/approved-actions/actions/setup-node/v4@stable major tag
spell-checking.yaml streetsidesoftware/cspell-action@v6 stone-payments/approved-actions/streetsidesoftware/cspell-action/v6@stable major tag (wrapper incluído no catálogo após revisão manual inicial)
sync-repositories.yaml actions/checkout@v4 (x2) stone-payments/approved-actions/actions/checkout/v4@stable major tag
sync-repositories.yaml actions/create-github-app-token@v1 (x2) stone-payments/approved-actions/actions/create-github-app-token/v1@stable major tag

⚠️ Actions de terceiros sem wrapper — revisão manual (NAO migradas)

Nenhuma pendente. streetsidesoftware/cspell-action (v6) estava anotada como sem wrapper na primeira análise; o wrapper foi incluído no catálogo approved-actions e a linha foi migrada nesta revisão.

🔒 Permissions adicionadas

Workflow Top-level
spell-checking.yaml contents: read
sync-repositories.yaml contents: read

Notas

  • Comentário de revisão manual (# approved-actions: nao encontrado no catalogo...) removido da linha cspell-action após confirmação do wrapper no catálogo.

Referência

  • approved-actions README
  • Catálogo lido de .catalog-entries.tsv em 2026-08-06 (revisado novamente após inclusão do wrapper streetsidesoftware/cspell-action v6)

@backstage-catalog-validator

Copy link
Copy Markdown

⚠️ Este repositório ainda não está catalogado no Backstage. ⚠️

Por favor, catalogue-o seguindo as instruções nesta documentação. [Via VPN].

💁 Qualquer problema ou dúvida, estamos no Slack, basta abrir um ticket no canal #help-foundation-platform.

@github-actions

github-actions Bot commented Aug 7, 2026

Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
See the Details below.

Scanned Files

  • .github/workflows/sync-repositories.yaml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant