[release/v7.5] Github Workflow cleanup#26389
Merged
TravisEz13 merged 1 commit intoPowerShell:release/v7.5from Nov 5, 2025
Merged
[release/v7.5] Github Workflow cleanup#26389TravisEz13 merged 1 commit intoPowerShell:release/v7.5from
TravisEz13 merged 1 commit intoPowerShell:release/v7.5from
Conversation
TravisEz13
added
CL-BuildPackaging
Contributor
There was a problem hiding this comment.
Pull Request Overview
This PR removes several unused workflow files and pins script references to a specific commit hash for improved security, addressing OpenSSF Scorecard requirements.
- Removes 5 workflow files that are no longer in use (markdown link checking, PR assignment, and reminder workflows)
- Pins script references in
install-powershell.shanddownload.shfrommasterbranch to a specific commit hash (26bb188) - Fixes trailing whitespace issue in
install-powershell.sh
Reviewed Changes
Copilot reviewed 7 out of 7 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| tools/install-powershell.sh | Pins gitreposubpath to specific commit hash instead of master branch; removes trailing whitespace on line 130 |
| tools/download.sh | Pins install script URL to specific commit hash instead of master branch |
| .github/workflows/processReminders.yml | Removes unused reminder processing workflow |
| .github/workflows/markdownLinkDaily.yml | Removes unused daily markdown link verification workflow |
| .github/workflows/markdownLink.yml | Removes unused markdown link checking workflow for PRs |
| .github/workflows/createReminders.yml | Removes unused reminder creation workflow |
| .github/workflows/AssignPrs.yml | Removes unused PR auto-assignment workflow |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
daxian-dbw
approved these changes
Nov 5, 2025
adityapatwardhan
approved these changes
Nov 5, 2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Backport of #26193 to release/v7.5
Triggered by @TravisEz13 on behalf of @TravisEz13
Original CL Label: CL-BuildPackaging
/cc @PowerShell/powershell-maintainers
Impact
Tooling Impact
This PR removes unused GitHub Actions workflows that are no longer needed. These workflows (AssignPrs, createReminders, markdownLink, markdownLinkDaily, processReminders) were deprecated and replaced by newer implementations.
Additionally, updates security pinning in tools/download.sh and tools/install-powershell.sh to use commit hashes instead of branch names, improving supply chain security per OpenSSF Scorecard requirements.
Regression
This is a cleanup change removing unused workflows and improving security practices. No regression is being fixed.
Testing
The original PR was tested by verifying that:
For this backport:
Risk
Risk Assessment: Low
This change has low risk because:
Merge Conflicts Resolution
During cherry-picking, there were modify/delete conflicts for the workflow files being removed:
These files had different commit hash pins in release/v7.5 compared to main (likely from security updates). Since the PR's intent is to remove these deprecated workflows, all four files were deleted to match the cleanup goal.