fix docker-verify-refreshed-at-updated workflow

[kernelsam]

Add pull-requests: read permission to docker-verify-refreshed-at-updated.yaml and remove incorrectly named verify-dockerfile-refreshed-at-updated.yaml.

[github-actions]

🤖 Claude Code Review

---

PR Code Review

PR: Rename verify-dockerfile-refreshed-at-updated.yaml → docker-verify-refreshed-at-updated.yaml with minor additions

---

Code Quality

✅ No commented-out code — The diff is clean.

✅ Meaningful variable names — The concurrency.group expression uses standard GitHub Actions idioms (github.workflow, github.head_ref, github.ref_name).

✅ DRY principle followed — No duplication introduced.

✅ No defects identified — The logic is straightforward. The cancel-in-progress: true concurrency setting is correct and safe for a verification workflow. The branches: [main] filter is appropriate.

✅ No .claude/CLAUDE.md — No project memory file to evaluate.

✅ Workflow name casing — The new name Docker verify REFRESHED_AT Updated is consistent with the job-level name Verify Dockerfiles REFRESHED_AT Updated. The rename of the file from verify-dockerfile-* to docker-verify-* aligns the filename convention with other workflows in the repo (e.g., docker-build-container.yaml).

---

Testing

N/A — This is a CI workflow configuration change; unit/integration tests do not apply.

---

Documentation

❌ CHANGELOG.md not updated — The CHANGELOG.md has not been updated to reflect this workflow rename/change. Per the review checklist, changelog updates are required.

✅ No README changes needed — This is an internal CI workflow rename.

✅ Inline comments — The file is simple enough that no comments are warranted.

---

Security

✅ No hardcoded credentials — None present.

✅ Permissions — Top-level permissions: {} (deny-all) with explicit least-privilege grants at the job level (contents: read, pull-requests: read). This is correct practice.

✅ No sensitive data in logs — Not applicable.

✅ No license files (.lic) — None present.

---

Summary

Category	Status
Code Quality	✅
Testing	N/A
Documentation	❌ CHANGELOG not updated
Security	✅

One required change: Add an entry to CHANGELOG.md documenting the workflow file rename and the addition of the branches: [main] filter and concurrency block.

Automated code review analyzing defects and coding standards

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter