From 29b3b835f12009e6f10cf0861c5d28f30a60dee1 Mon Sep 17 00:00:00 2001 From: "SUSE Observability AI (POC)" Date: Wed, 21 Oct 2026 10:32:51 +0000 Subject: [PATCH] Remove stale branch label from pinned scan action The ec325c7 scan implementation has no release tag. Its main comment became false when image-pipeline advanced and online Zizmor then blocked master publication. Remove only that comment, retaining the verified action SHA and all workflow behavior. --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f998166a..f9678fdd 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -202,7 +202,7 @@ jobs: grep -F '/probe.sh' <<< "${healthcheck}" - name: Scan image with VEX-aware Trivy and Grype - uses: StackVista/image-pipeline/.github/actions/scan-image@ec325c73909d0d00420121bbde6754b964e80ac3 # main + uses: StackVista/image-pipeline/.github/actions/scan-image@ec325c73909d0d00420121bbde6754b964e80ac3 with: image: ${{ env.IMAGE }}:${{ steps.image.outputs.tag }}-${{ matrix.arch }} mode: inform