f33408f0d6
Closes the one outstanding item from v0.21.1 wave-audit: SEC-H1 agent left SHA256_* vars as 'SKIP' because no WebFetch available this session. Sources verified via live curl: https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_checksums.txt Pinned hashes (4 platforms): darwin_amd64: 5b44c3bc...c644 darwin_arm64: aba9ced2...953f linux_amd64: 8aca8db9...a3d8 linux_arm64: 325e971b...f0c6 End-to-end verified locally (darwin_arm64): HOME=/tmp/aln-test bash scripts/install-actionlint.sh → SHA-256 verified: aba9ced2... → actionlint -version: 1.7.12 installed by downloading from release page Header comment updated: [UNVERIFIED] → [VERIFIED 2026-04-22 via curl ...]. ACTIONLINT_SHA256_OVERRIDE env var still works (for CI with different pins). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| install-actionlint.sh | ||
| lint-workflows.sh | ||
| pre-commit-workflow-lint.sh | ||
| precommit-counts-check.sh | ||
| regen-counts.sh | ||
| validate-workflow-shas.sh | ||