Skip to content

chore(deps): Bump platformdirs from 4.11.12 to 4.12.2 #227

chore(deps): Bump platformdirs from 4.11.12 to 4.12.2

chore(deps): Bump platformdirs from 4.11.12 to 4.12.2 #227

name: Contributor reputation check

Check warning on line 1 in .github/workflows/contributor-check.yml

View workflow run for this annotation

GitHub Actions / Contributor reputation check

Workflow execution policy warning (evaluate mode)

On November 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
on:
pull_request_target:
types: [opened]
issues:
types: [opened]
workflow_dispatch:
inputs:
username:
description: GitHub username to check
required: true
permissions:
contents: read
issues: write
pull-requests: write
jobs:
check:
runs-on: ubuntu-latest
if: |
github.actor != 'dependabot[bot]' &&
github.actor != 'github-actions[bot]' &&
github.actor != 'copilot-swe-agent[bot]' &&
github.actor != 'claude-code[bot]' &&
github.actor != 'imran-siddique'
steps:
- name: Checkout org action
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: agentrust-io/.github
# Pinned deliberately: this workflow runs on pull_request_target
# with a write-capable token, so the code it checks out must not
# track a mutable ref. Bump this SHA after reviewing the diff.
ref: 0fe4520ee71a743fcd33f409fe366ee3e1da6f86 # main as of 2026-08-01
persist-credentials: false
sparse-checkout: |
scripts
.github/actions/contributor-check
- name: Run contributor check
uses: ./.github/actions/contributor-check
with:
github-token: ${{ secrets.GITHUB_TOKEN }}