From e1f39b5f5be9bdba83e3d719aa22ab4f61057ea5 Mon Sep 17 00:00:00 2001 From: Grant Birkinbine Date: Tue, 4 Aug 2026 21:51:00 +0000 Subject: [PATCH] Add Fence auditing to the blob size workflow (#36979) ## What changed Run the hash-pinned `openai/fence` action in `audit` mode before checkout in the blob size policy job. GitOrigin-RevId: 9312897dae76d93298008b2ce8a8767680fe34b8 --- .github/workflows/blob-size-policy.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/blob-size-policy.yml b/.github/workflows/blob-size-policy.yml index 7dd6d2839f..176f368938 100644 --- a/.github/workflows/blob-size-policy.yml +++ b/.github/workflows/blob-size-policy.yml @@ -10,6 +10,9 @@ jobs: permissions: contents: read steps: + - uses: openai/fence@e6b39c80c51cb2b2a39448ddeff74b3b886c0a63 # pin@v0.10.0 + with: + mode: audit - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}