-
Notifications
You must be signed in to change notification settings - Fork 159
[Patch][Bugfix]: Fix issue in PR title format check #2875
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: dev
Are you sure you want to change the base?
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change | ||
|---|---|---|---|---|
| @@ -1,9 +1,9 @@ | ||||
| # IMPORTANT: This workflow is using a centralized PR Title validation as a reusable workflow from the AzureAD/azure-activedirectory-tokenbroker-for-objc repository. This helps ensure there is only a single source of truth for PR title linting across repos. | ||||
| # | ||||
| # The PR title lint workflow lives in the 'main' branch of 'azure-activedirectory-tokenbroker-for-objc'. | ||||
| # The PR title lint workflow lives in the 'dev' branch of 'azure-activedirectory-tokenbroker-for-objc'. | ||||
| # | ||||
| # To update or modify PR title requirements, ONLY edit the file: | ||||
| # https://github.com/AzureAD/azure-activedirectory-tokenbroker-for-objc/blob/main/.github/workflows/pr-title-lint.yml | ||||
| # https://github.com/AzureAD/azure-activedirectory-tokenbroker-for-objc/blob/dev/.github/workflows/pr-title-lint-reusable.yml | ||||
| # | ||||
| # For more information on reusable workflows, see: https://docs.github.com/en/actions/using-workflows/reusing-workflows | ||||
|
|
||||
|
|
@@ -15,7 +15,8 @@ on: | |||
|
|
||||
| permissions: | ||||
| pull-requests: read | ||||
|
|
||||
|
||||
Copilot
AI
Feb 21, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Issue: The reusable workflow is referenced by a mutable branch ref (@dev). Impact: if that branch is updated (or compromised), this repo’s PR checks can change unexpectedly, which is a supply-chain risk and can also make CI behavior non-reproducible. Recommendation: pin the uses: reference to a specific tag or commit SHA (and update periodically), instead of a branch name; if you need a moving target, prefer a protected release branch and document the expected update process.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This pull request does not update CHANGELOG.md.
Please consider if this change would be noticeable to a partner or user and either update CHANGELOG.md or resolve this conversation.