Remove tj-actions/branch-names from upgrade catalog workflow by stuggi · Pull Request #1961 · openstack-k8s-operators/openstack-operator · GitHub
Skip to content

Remove tj-actions/branch-names from upgrade catalog workflow#1961

Open
stuggi wants to merge 1 commit into
openstack-k8s-operators:mainfrom
stuggi:remove-tj-actions2
Open

Remove tj-actions/branch-names from upgrade catalog workflow#1961
stuggi wants to merge 1 commit into
openstack-k8s-operators:mainfrom
stuggi:remove-tj-actions2

Conversation

@stuggi

@stuggi stuggi commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

Replace tj-actions/branch-names with github.ref_name which provides the branch name natively without a third-party action. The tj-actions GitHub namespace was compromised in March 2025 (CVE-2025-30066) and using actions from that namespace is no longer recommended. Pass the value via env: to avoid shell interpolation of untrusted input in run: blocks.

Jira: OSPRH-31981

@openshift-ci openshift-ci Bot requested review from abays and dprince June 26, 2026 12:08
@openshift-ci

openshift-ci Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

@github-actions

Copy link
Copy Markdown

OpenStackControlPlane CRD Size Report

Metric Value
CRD JSON size 350002 bytes (342KB)
Base branch size 350002 bytes
Change +0.00%
Status yellow — growing
Threshold reference
Color Range Meaning
🟢 green < 300KB Comfortable
🟡 yellow 300–400KB Growing
🟠 orange 400–750KB Concerning
🔴 red > 750KB Approaching 1.5MB etcd limit (cut in half to allow space for update)

Replace tj-actions/branch-names with github.ref_name which provides
the branch name natively without a third-party action. The tj-actions
GitHub namespace was compromised in March 2025 (CVE-2025-30066) and
using actions from that namespace is no longer recommended. Pass the
value via env: to avoid shell interpolation of untrusted input in run:
blocks.

Jira: OSPRH-31981

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Martin Schuppert <mschuppert@redhat.com>
@stuggi stuggi force-pushed the remove-tj-actions2 branch from 2a1a4ea to 29011b0 Compare June 26, 2026 14:03
@openshift-ci

openshift-ci Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

@stuggi: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/openstack-operator-build-deploy-kuttl-4-18 29011b0 link true /test openstack-operator-build-deploy-kuttl-4-18

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant