Skip to content

Conversation

@TravisEz13
Copy link
Member

PR Summary

This pull request removes several GitHub Actions workflow files related to automation and continuous integration, and updates scripts to pin downloads to a specific commit for enhanced security. The main focus is on cleaning up unused or deprecated workflows and improving the security posture by ensuring scripts are fetched from a known commit.

Workflow cleanup and deprecation:

  • Deleted multiple GitHub Actions workflow files, including those for auto-assigning PR maintainers (AssignPrs.yml), creating and processing reminders (createReminders.yml, processReminders.yml), and markdown link checking (markdownLink.yml, markdownLinkDaily.yml). This removes automation for PR assignment, reminders, and markdown validation. [1] [2] [3] [4] [5]

Security improvements:

  • Updated tools/download.sh to pin the download of install-powershell.sh to a specific commit (26bb188c8be0cda6cb548ce1a12840ebf67e1331) for compliance with OpenSSF Scorecard requirements, ensuring that scripts are fetched from a trusted and immutable source.
  • Modified tools/install-powershell.sh to use the same pinned commit for downloading resources, further enforcing script integrity and traceability.

PR Context

  • Remove use of 3rd party GitHub actions in Pull Request workflows
  • Fix other security issues

PR Checklist

@TravisEz13 TravisEz13 requested review from a team and jshigetomi as code owners October 14, 2025 21:14
@xtqqczze
Copy link
Contributor

Super-linter is maintained by @zkoppert who works for GitHub, so isn't this a first party action?

@daxian-dbw daxian-dbw added the CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log label Oct 15, 2025
@TravisEz13
Copy link
Member Author

/azp run PowerShell-CI-linux-packaging, PowerShell-Windows-Packaging-CI

@azure-pipelines
Copy link

Azure Pipelines could not run because the pipeline triggers exclude this branch/path.

@TravisEz13 TravisEz13 added the Compliance Related to compliance requirements label Oct 15, 2025
@TravisEz13 TravisEz13 enabled auto-merge (squash) October 15, 2025 19:33
@TravisEz13 TravisEz13 merged commit 0e90b57 into PowerShell:master Oct 15, 2025
35 of 36 checks passed
@TravisEz13 TravisEz13 deleted the gh-workflow-cleanup branch October 15, 2025 19:33
@microsoft-github-policy-service
Copy link
Contributor

microsoft-github-policy-service bot commented Oct 15, 2025

📣 Hey @@TravisEz13, how did we do? We would love to hear your feedback with the link below! 🗣️

🔗 https://aka.ms/PSRepoFeedback

@TravisEz13
Copy link
Member Author

TravisEz13 commented Oct 17, 2025

#26219 Created to add some functionality back

SIRMARGIN pushed a commit to SIRMARGIN/PowerShell that referenced this pull request Dec 12, 2025
kilasuit pushed a commit to kilasuit/PowerShell that referenced this pull request Jan 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Backport-7.4.x-Migrated Backport-7.5.x-Migrated Backport-7.6.x-Migrated CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log Compliance Related to compliance requirements

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants