ColibriSec/ojo-forgejo
Watch
1
0
Fork
You've already forked ojo-forgejo
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

chore: pin default ojo image to v0.2.4 by digest #18

Open
james wants to merge 1 commit from james/chore/pin-ojo-image into main AGit
pull from: james/chore/pin-ojo-image
merge into: ColibriSec:main
Conversation 1 Commits 1 Files changed 3 +15 -4
james commented 2026-10-08 15:23:21 +00:00
Owner
Copy link

The default ojo-version floated on latest, so every run pulled whatever the tag pointed at. This pins the action.yml default to v0.2.4@sha256:09a5bad2… (what latest and v0.2.4 both resolve to today), adds a Renovate regex custom manager that bumps tag and digest together, and updates the README inputs table. Callers passing their own ojo-version are unaffected. Tested: test/test_scan.sh passes and the Renovate regex matches action.yml. Not tested: an actual pull of the pinned ref (no local Docker access) and a real Renovate run. 🤖 Generated with Claude Code

The default ojo-version floated on latest, so every run pulled whatever the tag pointed at. This pins the action.yml default to v0.2.4@sha256:09a5bad2… (what latest and v0.2.4 both resolve to today), adds a Renovate regex custom manager that bumps tag and digest together, and updates the README inputs table. Callers passing their own ojo-version are unaffected. Tested: test/test_scan.sh passes and the Renovate regex matches action.yml. Not tested: an actual pull of the pinned ref (no local Docker access) and a real Renovate run. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
chore: pin default ojo image to v0.2.4 by digest
Some checks failed
test / test (pull_request) Successful in 17s
Details
security-scan / security-scan (pull_request) Has been cancelled
Details
608aa1dba3 
The default ojo-version floated on 'latest', so every run pulled whatever
the tag pointed at. Pin it to v0.2.4@sha256 and add a Renovate regex
manager so the tag and digest are bumped together.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
james force-pushed james/chore/pin-ojo-image from 608aa1dba3
Some checks failed
test / test (pull_request) Successful in 17s
Details
security-scan / security-scan (pull_request) Has been cancelled
Details
to 7bebf0f73c
All checks were successful
test / test (pull_request) Successful in 2m21s
Details
security-scan / security-scan (pull_request) Successful in 16m55s
Details
2026-10-08 15:25:12 +00:00 Compare
forgejo-actions commented 2026-10-08 15:42:01 +00:00
Copy link

🔎 ojo scan results

No findings.

<!-- ojo-scan-summary --> ### 🔎 ojo scan results No findings.
All checks were successful
test / test (pull_request) Successful in 2m21s
Details
security-scan / security-scan (pull_request) Successful in 16m55s
Details
This pull request doesn't have enough approvals yet. 0 of 1 approvals granted.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin +refs/pull/18/head:james/chore/pin-ojo-image
git switch james/chore/pin-ojo-image
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
ColibriSec/ojo-forgejo!18
No description provided.