Skip to content

Replace Slack notification action and harden action refs#102

Merged
kvz merged 2 commits into
mainfrom
gha-slack
Jun 8, 2026
Merged

Replace Slack notification action and harden action refs#102
kvz merged 2 commits into
mainfrom
gha-slack

Conversation

@kvz
Copy link
Copy Markdown
Member

@kvz kvz commented Jun 8, 2026 •
edited
Loading

Why

Reduce GitHub Actions supply-chain exposure by removing the third-party Slack notification action from the CI failure path.

What changed

  • Replaces 8398a7/action-slack with a direct incoming-webhook curl step.
  • Keeps notifications scoped to main-branch Java CI failures.

Validation

  • Ruby YAML parse for .github/workflows/tests.yml
  • git diff --check

Additional action reference hardening included here:

  • Updates GitHub-owned actions in touched workflows to current major tags.
  • Pins retained third-party actions in touched workflows to reviewed commit SHAs, keeping version comments beside each SHA.

@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Jun 8, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 77.04%. Comparing base (5c770cb) to head (1a5d0cf).

Additional details and impacted files 
@@            Coverage Diff            @@
##               main     #102   +/-   ##
=========================================
  Coverage     77.04%   77.04%           
  Complexity      217      217           
=========================================
  Files            13       13           
  Lines           793      793           
  Branches         71       71           
=========================================
  Hits            611      611           
  Misses          146      146           
  Partials         36       36

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@kvz kvz marked this pull request as ready for review June 8, 2026 10:33
@kvz kvz changed the title Replace Slack notification action Replace Slack notification action and harden action refs Jun 8, 2026
@kvz kvz merged commit e0f3219 into main Jun 8, 2026
4 of 6 checks passed
@kvz kvz deleted the gha-slack branch June 8, 2026 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@kvz @codecov-commenter