Skip to content

[PD1-1117] Remove the duplicate Python license-check workflow - #34

Merged
joshuanapoli merged 1 commit into
mainfrom
pd1-1117-drop-duplicate-license-check
Sep 22, 2026
Merged

joshuanapoli merged 1 commit into
mainfrom
pd1-1117-drop-duplicate-license-check

Conversation

@joshuanapoli

Copy link
Copy Markdown
Member

.github/workflows/license-check-python.yml predates the fleet-wide license-check rollout and has been running alongside the workflow that replaced it. This removes it.

Why it is redundant

It is a near-copy of the fleet-managed .github/workflows/pyproject-license-check.yml, which cvec-management-account pushes into every repository GitHub detects as Python:

license-check-python.yml (removed) pyproject-license-check.yml (kept)
Workflow name Python License Check Python License Check
Trigger on: push on: push
Job license-check on ubuntu-24.04 license-check on ubuntu-24.04
Action pin pyproject-license-check@977092b2 (v0.1.0) pyproject-license-check@d56c86ec (v0.5.1)
CodeArtifact access none id-token: write + AWS credentials

Both fire on every push — the last three runs of each started at the same second — so every push has been paying for the license check twice.

Three things follow from that:

  • The kept workflow is a superset. It assumes the OIDC role for CodeArtifact, so it can resolve private dependencies; the removed one could not.
  • The removed one was on a stale pin. v0.1.0 pulls in actions/create-github-app-token@v2.2.1, a Node 20 action, so it was still emitting the Node.js 20 is deprecated. warning. Deleting it clears that warning without needing a re-pin.
  • Two workflows shared a display name. workflow_run selects on name:, not filename, so a duplicate name is a hazard for any automation built on it.

Verification

  • Nothing in the repository references license-check-python.
  • main has no branch protection, so no required status check named after this workflow can be orphaned. The kept workflow reports the same Python License Check name regardless.
  • actionlint and zizmor are clean on the branch.

Part of the fleet-wide sweep for PD1-1117.

🤖 Generated with Claude Code

license-check-python.yml predates the fleet-managed pyproject-license-check.yml
and duplicates it: same workflow name, same trigger, same job, but an older
action pin and no CodeArtifact access. Both ran on every push.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@joshuanapoli joshuanapoli self-assigned this Sep 22, 2026

@alok27a alok27a left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks Josh

@joshuanapoli
joshuanapoli merged commit 9a70fce into main Sep 22, 2026
2 checks passed
@joshuanapoli
joshuanapoli deleted the pd1-1117-drop-duplicate-license-check branch September 22, 2026 15:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants