OK. Issue solved - I used my infra super-powers to allow our slack action. I closed and reopened PRs that were green without running tests. Need to go to sleep now; I'm driving tomorrow morning . If anyone sees any problems, other fixes in main might be needed—perhaps reverting the PRs that caused them.
J. On Sat, Mar 21, 2026 at 1:26 AM Jarek Potiuk <[email protected]> wrote: > Hey here. > > There was a security incident > https://www.stepsecurity.io/blog/trivy-compromised-a-second-time---malicious-v0-69-4-release > and INFRA disabled "verified creator"s actions. We have a slack action that > was disabled. > > UNFORTUNATELY. The way it works for GH Actions is that our PRs get [image: > :white_check_mark:] without running any tests - because of slack action. > > A workaround and a fix are coming. > > J. > >
