[release/v7.5] Github Workflow cleanup (#26389)

.github/workflows/AssignPrs.yml

@@ -1,30 +0,0 @@
-name: Auto Assign PR Maintainer
-on:
-  issues:
-    types: [opened, edited]
-permissions:
-  contents: read
-
-jobs:
-  run:
-    if: github.repository_owner == 'PowerShell'
-    runs-on: ubuntu-latest
-    permissions:
-      issues: write
-      pull-requests: write
-    steps:
-      - uses: wow-actions/auto-assign@67fafa03df61d7e5f201734a2fa60d1ab111880d # v3.0.2
-        if: github.event.issue.pull_request
-        with:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # using the `org/team_slug` or `/team_slug` syntax to add git team as reviewers
-          assignees: |
-            TravisEz13
-            daxian-dbw
-            adityapatwardhan
-            iSazonov
-            SeeminglyScience
-          skipDraft: true
-          skipKeywords: wip, draft
-          addReviewers: false
-          numberOfAssignees: 1

.github/workflows/createReminders.yml

@@ -1,21 +0,0 @@
-name: 'Create reminder'
-
-on:
-  issue_comment:
-    types: [created, edited]
-
-permissions:
-  contents: read
-
-jobs:
-  reminder:
-    if: github.repository_owner == 'PowerShell'
-
-    permissions:
-      issues: write  # for agrc/create-reminder-action to set reminders on issues
-      pull-requests: write  # for agrc/create-reminder-action to set reminders on PRs
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: check for reminder
-        uses: agrc/create-reminder-action@ffa4363460fe5fff73b2b58e66fa7eb01f7465a0 # v1.1.15

.github/workflows/markdownLink.yml

@@ -1,52 +0,0 @@
-on:
-  pull_request:
-    branches:
-      - master
-      - 'release/**'
-
-name: Check modified markdown files
-permissions:
-  contents: read
-
-jobs:
-  markdown-link-check:
-    runs-on: ubuntu-latest
-    if: github.repository_owner == 'PowerShell'
-
-    steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
-    - uses: gaurav-nelson/github-action-markdown-link-check@5c5dfc0ac2e225883c0e5f03a85311ec2830d368 # v1
-      with:
-        use-quiet-mode: 'yes'
-        use-verbose-mode: 'yes'
-        check-modified-files-only: 'yes'
-        config-file: .github/workflows/markdown-link/config.json
-  markdown-lint:
-    permissions:
-      contents: read
-      packages: read
-      statuses: write
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
-      with:
-        # Full git history is needed to get a proper
-        # list of changed files within `super-linter`
-        fetch-depth: 0
-    - name: Load super-linter configuration
-      # Use grep inverse matching to exclude eventual comments in the .env file
-      # because the GitHub Actions command to set environment variables doesn't
-      # support comments.
-      # Ref: https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/workflow-commands-for-github-actions#setting-an-environment-variable
-      run: grep -v '^#' tools/super-linter/config/super-linter.env >> "$GITHUB_ENV"
-    - name: Lint Markdown
-      uses: super-linter/super-linter@b4515bd4ad9d0aa4681960e053916ab991bdbe96 # v6.8.0
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-    - name: Super-Linter correction instructions
-      if: failure()
-      uses: actions/github-script@v7.0.1
-      with:
-        script: |
-          const message = "Super-Linter found issues in the changed files. Please check the logs for details.  You can run the linter locally using the command: `./tools/super-lister/super-lister.ps1`.";
-          core.setFailed(message);

.github/workflows/markdownLinkDaily.yml

@@ -1,33 +0,0 @@
-# Copyright (c) Microsoft Corporation.
-# Licensed under the MIT license.
-
-name: PowerShell Daily Markdown Link Verification
-
-on:
-  workflow_dispatch:
-  schedule:
-  # At 13:00 UTC every day.
-  - cron:  '0 13 * * *'
-
-permissions:
-  contents: read
-
-jobs:
-  markdown-link-check:
-    runs-on: ubuntu-latest
-    if: github.repository == 'PowerShell/PowerShell'
-    steps:
-    - name: Checkout
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
-    - name: Check Links
-      uses: gaurav-nelson/github-action-markdown-link-check@5c5dfc0ac2e225883c0e5f03a85311ec2830d368 # v1
-      with:
-        use-quiet-mode: 'yes'
-        use-verbose-mode: 'yes'
-        config-file: .github/workflows/markdown-link/config.json
-    - name: Microsoft Teams Notifier
-      uses: skitionek/notify-microsoft-teams@77cc88b484449e2318245a54c115c5dca0eae4ef # master
-      if: failure()
-      with:
-        webhook_url: ${{ secrets.PS_BUILD_TEAMS_CHANNEL }}
-        overwrite: "{title: `Failure in .github/markdownLinkDaily.yml validating links. Look at ${workflow_link}`}"

.github/workflows/processReminders.yml

@@ -1,21 +0,0 @@
-name: 'Process reminders'
-
-on:
-  schedule:
-    - cron: '*/15 * * * *'
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-jobs:
-  reminder:
-    if: github.repository_owner == 'PowerShell'
-    permissions:
-      issues: write  # for agrc/reminder-action to set reminders on issues
-      pull-requests: write  # for agrc/reminder-action to set reminders on PRs
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: check reminders and notify
-        uses: agrc/reminder-action@b5cc06580b6a711baddf6a947131f85a422fa263 # v1.0.14

tools/download.sh

@@ -1 +1,3 @@
-bash <(curl -s https://raw.githubusercontent.com/PowerShell/PowerShell/master/tools/install-powershell.sh)
+# Pin to specific commit for security (OpenSSF Scorecard requirement)
+# Pinned commit: 26bb188c8 - "Improve ValidateLength error message consistency and refactor validation tests" (2025-10-12)
+bash <(curl -s https://raw.githubusercontent.com/PowerShell/PowerShell/26bb188c8be0cda6cb548ce1a12840ebf67e1331/tools/install-powershell.sh)

tools/install-powershell.sh

@@ -26,7 +26,9 @@ install(){
     #gitrepo paths are overrideable to run from your own fork or branch for testing or private distribution
 
     local VERSION="1.2.0"
-    local gitreposubpath="PowerShell/PowerShell/master"
+    # Pin to specific commit for security (OpenSSF Scorecard requirement)
+    # Pinned commit: 26bb188c8 - "Improve ValidateLength error message consistency and refactor validation tests" (2025-10-12)
+    local gitreposubpath="PowerShell/PowerShell/26bb188c8be0cda6cb548ce1a12840ebf67e1331"
     local gitreposcriptroot="https://raw.githubusercontent.com/$gitreposubpath/tools"
     local gitscriptname="install-powershell.psh"
 
@@ -125,7 +127,7 @@ install(){
 			if [[ $osname = *SUSE* ]]; then
 				DistroBasedOn='suse'
 				REV=$(source /etc/os-release; echo $VERSION_ID)
-			fi			
+			fi
             OS=$(lowercase $OS)
             DistroBasedOn=$(lowercase $DistroBasedOn)
         fi