[DELENG-365] Add catalog workflow to use allowlist SHA #1
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | ||
| name: Catalog | ||
| on: | ||
| workflow_dispatch: | ||
| pull_request: | ||
| push: | ||
| branches: | ||
| - main | ||
| permissions: | ||
| contents: "read" | ||
| packages: "read" | ||
| id-token: "write" | ||
| jobs: | ||
| docs: | ||
| if: "!contains(github.ref_name, '/')" | ||
| # SHA: 436c9e4b5ba68282956ffa169ae714827cf49bc5 | ||
| # Source: service-catalog PR #113 merge commit (main branch, 2026-02-23) | ||
| # Whitelisted in: projects/pantheon-wif/workload-identity-federation.tf | ||
| # See: https://github.com/pantheon-systems/gce-terraform/blob/master/projects/pantheon-wif/workload-identity-federation.tf#L106 | ||
| uses: pantheon-systems/service-catalog/.github/workflows/docs-like-code.yaml@436c9e4b5ba68282956ffa169ae714827cf49bc5 # main @ Feb 23, 2026 | ||
|
Check failure on line 20 in .github/workflows/catalog.yaml
|
||
| catalog-upload: | ||
| if: "!contains(github.ref_name, '/')" | ||
| # SHA: 436c9e4b5ba68282956ffa169ae714827cf49bc5 | ||
| # Source: service-catalog PR #113 merge commit (main branch, 2026-02-23) | ||
| # This SHA is whitelisted in the pantheon-service-catalog WIF pool for production classification | ||
| # Whitelist location: projects/pantheon-wif/workload-identity-federation.tf (attribute.jwr_repo_file_env) | ||
| # See: https://github.com/pantheon-systems/gce-terraform/blob/master/projects/pantheon-wif/workload-identity-federation.tf#L106 | ||
| uses: pantheon-systems/service-catalog/.github/workflows/catalog-upload.yaml@436c9e4b5ba68282956ffa169ae714827cf49bc5 # main @ Feb 23, 2026 | ||