chore: rename AI Markdown translator references#21822
Conversation
📝 WalkthroughWalkthrough两个文档同步工作流统一使用 Changes翻译器仓库迁移
Estimated code review effort: 2 (Simple) | ~10 minutes 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.github/workflows/sync-ai-docs-en-to-zh.yml:
- Line 135: The workflows use mutable `@v6` action tags; pin every affected `@v6`
dependency to its corresponding full commit SHA. Update actions/setup-python in
.github/workflows/sync-ai-docs-en-to-zh.yml:135, actions/checkout in
.github/workflows/sync-doc-pr-en-to-zh.yml:44, and all other `@v6` dependencies in
the same files, preserving their intended action versions.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: ASSERTIVE
Plan: Pro
Run ID: 0fd8632e-9c37-47e6-87a7-f9617a1cce4a
📒 Files selected for processing (2)
.github/workflows/sync-ai-docs-en-to-zh.yml.github/workflows/sync-doc-pr-en-to-zh.yml
| path: ai-markdown-translator | ||
| persist-credentials: false | ||
|
|
||
| - uses: actions/setup-python@v6 |
There was a problem hiding this comment.
🔒 Security & Privacy | 🟡 Minor | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
set -euo pipefail
printf '\n== sync-ai-docs-en-to-zh.yml around line 135 ==\n'
sed -n '120,150p' .github/workflows/sync-ai-docs-en-to-zh.yml | cat -n
printf '\n== sync-doc-pr-en-to-zh.yml around line 44 ==\n'
sed -n '30,55p' .github/workflows/sync-doc-pr-en-to-zh.yml | cat -n
printf '\n== workflow uses of actions/checkout and actions/setup-python ==\n'
rg -n "uses:\s*actions/(checkout|setup-python)@" .github/workflows -SRepository: pingcap/docs-cn
Length of output: 4352
🏁 Script executed:
set -euo pipefail
printf '\n== pinning / zizmor references ==\n'
rg -n "zizmor|pin(n|ning)|commit SHA|full commit|actions/checkout@v6|actions/setup-python@v6" . -S
printf '\n== workflow/security related files ==\n'
git ls-files | rg '(^|/)(README|SECURITY|CONTRIBUTING|\.github/.*(yml|yaml|md)|zizmor|action).*'Repository: pingcap/docs-cn
Length of output: 1090
将这两处工作流依赖固定到 commit SHA。
.github/workflows/sync-ai-docs-en-to-zh.yml:135 的 actions/setup-python@v6 和 .github/workflows/sync-doc-pr-en-to-zh.yml:44 的 actions/checkout@v6 都还是可变标签,建议改为对应版本的完整 commit SHA;同文件里的其他 @v6 依赖也一并处理。
🧰 Tools
🪛 zizmor (1.26.1)
[error] 135-135: unpinned action reference (unpinned-uses): action is not pinned to a hash (required by blanket policy)
(unpinned-uses)
📍 Affects 2 files
.github/workflows/sync-ai-docs-en-to-zh.yml#L135-L135(this comment).github/workflows/sync-doc-pr-en-to-zh.yml#L44-L44
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.github/workflows/sync-ai-docs-en-to-zh.yml at line 135, The workflows use
mutable `@v6` action tags; pin every affected `@v6` dependency to its corresponding
full commit SHA. Update actions/setup-python in
.github/workflows/sync-ai-docs-en-to-zh.yml:135, actions/checkout in
.github/workflows/sync-doc-pr-en-to-zh.yml:44, and all other `@v6` dependencies in
the same files, preserving their intended action versions.
Source: Linters/SAST tools
|
/approve |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: qiancai The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
What is changed, added or deleted? (Required)
Update the GitHub Actions workflows to use the renamed
qiancai/ai-markdown-translatorrepository and matching checkout paths.Which TiDB version(s) do your changes apply to? (Required)
What is the related PR or file link(s)?
AI agent involvement
Do your changes match any of the following descriptions?
Summary by CodeRabbit