chore(deps): update actions/checkout action to v7.0.1

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v7.0.0 → v7.0.1

---

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

• Skip running unsafe pr check if input is default by @​aiqiaoy in #​2518
• Trim only ascii whitespace for branch by @​aiqiaoy in #​2521
• Escape values passed to --unset by @​aiqiaoy in #​2530
• Various dependency updates

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 4bd19dfe-7042-4ede-a3dd-feb401bf0b84

📥 Commits

Reviewing files that changed from the base of the PR and between 07df2d9 and ea5b434.

📒 Files selected for processing (14)

• .github/workflows/nightly-dashboard-pages.yml
• .github/workflows/release-clis-to-ghcr.yml
• .github/workflows/scorecard.yaml
• .github/workflows/security-codeql.yml
• .github/workflows/test-actionlint.yml
• .github/workflows/test-e2e-as.yml
• .github/workflows/test-e2e-kbs.yml
• .github/workflows/test-link-check.yml
• .github/workflows/test-rust-ci.yml
• .github/workflows/workflow-call-build-docker-e2e-materials.yml
• .github/workflows/workflow-call-build-staged-images-pr.yml
• .github/workflows/workflow-call-build-staged-images-push.yml
• .github/workflows/workflow-call-helm-e2e.yml
• .github/workflows/zizmor.yaml

Included review availability: Your plan provides up to 12 included reviews per hour; 8 remain after this review.

---

Walkthrough

The pull request updates pinned actions/checkout references from v7.0.0 to v7.0.1 across GitHub Actions workflows.

Changes

Checkout action update

Layer / File(s)	Summary
Update workflow checkout pins .github/workflows/*	All affected workflow checkout steps now use the pinned actions/checkout v7.0.1 revision. Build matrices and job behavior remain unchanged.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Merge Risk: ⚪ Minimal · up to ea5b4

This updates all checkout steps to actions/checkout v7.0.1 while retaining immutable pins and existing workflow controls. No current merge-blocking risk is identified.

Suggested reviewers: xynnn007

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: updating the actions/checkout action to v7.0.1.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	PASS. The pull request changes only pinned actions/checkout commit references in 14 GitHub workflow files. The parent-to-HEAD diff contains no Ginkgo test code or test-title changes. The workflow ex…
Test Structure And Quality	✅ Passed	PASS: The pull request changes only 14 GitHub Actions workflow YAML files. The parent-to-HEAD diff contains only replacements of the pinned actions/checkout SHA and version comment from v7.0.0 to v7…
Microshift Test Compatibility	✅ Passed	PASS — The pull request changes only 14 GitHub workflow files. The diff contains only actions/checkout pin updates from v7.0.0 to v7.0.1. No Go files or Ginkgo declarations (It, Describe, `Conte…
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PASS: The pull request changes only 14 GitHub Actions workflow files. The diff replaces actions/checkout pins from v7.0.0 to v7.0.1 and adds no Ginkgo e2e tests or other test declarations. Therefore…
Topology-Aware Scheduling Compatibility	✅ Passed	PASS: The PR changes only 14 GitHub workflow files. The diff updates pinned actions/checkout references from v7.0.0 to v7.0.1. It adds or modifies no deployment manifests, operator code, controllers…
Ote Binary Stdout Contract	✅ Passed	PASS: The commit changes only 26 actions/checkout references in 14 GitHub workflow files, replacing the v7.0.0 SHA/comment with v7.0.1. No OTE binary, Go/Ginkgo suite setup, or process-level stdout …
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PASS: The pull request changes only 14 workflow files. The complete diff only replaces pinned actions/checkout SHAs and adds no Ginkgo tests or test networking code. Therefore, the IPv6 and disconne…
No-Weak-Crypto	✅ Passed	PASS. The commit changes only 26 workflow reference lines, replacing the pinned actions/checkout commit with the v7.0.1 commit. The added lines contain no MD5, SHA-1, DES, 3DES, RC4, Blowfish, ECB, …
Container-Privileges	✅ Passed	PASS. The pull request changes only pinned actions/checkout references in 14 GitHub workflow files. The diff contains 26 additions and 26 removals, with no other added lines. No changed file introdu…
No-Sensitive-Data-In-Logs	✅ Passed	PASS. The PR diff changes only the pinned actions/checkout SHA and version comment in 14 workflow files. It adds no logging commands or log output. The changed checkout blocks retain `persist-creden…

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (14 skipped: 14 unsupported.)

Full details: Stable And Deterministic Test Names

Explanation

PASS. The pull request changes only pinned actions/checkout commit references in 14 GitHub workflow files. The parent-to-HEAD diff contains no Ginkgo test code or test-title changes. The workflow expressions and job names are not Ginkgo It, Describe, Context, or When titles.

Full details: Test Structure And Quality

Explanation

PASS: The pull request changes only 14 GitHub Actions workflow YAML files. The parent-to-HEAD diff contains only replacements of the pinned actions/checkout SHA and version comment from v7.0.0 to v7.0.1. It does not add or modify Ginkgo It blocks or any test setup, cleanup, timeout, or assertion code, so none of the stated Ginkgo quality failure conditions applies.

Full details: Microshift Test Compatibility

Explanation

PASS — The pull request changes only 14 GitHub workflow files. The diff contains only actions/checkout pin updates from v7.0.0 to v7.0.1. No Go files or Ginkgo declarations (It, Describe, Context, or When) were added or changed, so the MicroShift test compatibility check is not applicable.

Full details: Single Node Openshift (Sno) Test Compatibility

Explanation

PASS: The pull request changes only 14 GitHub Actions workflow files. The diff replaces actions/checkout pins from v7.0.0 to v7.0.1 and adds no Ginkgo e2e tests or other test declarations. Therefore, the SNO multi-node compatibility check is not applicable.

Full details: Topology-Aware Scheduling Compatibility

Explanation

PASS: The PR changes only 14 GitHub workflow files. The diff updates pinned actions/checkout references from v7.0.0 to v7.0.1. It adds or modifies no deployment manifests, operator code, controllers, or scheduling constraints, so this topology check is not applicable.

Full details: Ote Binary Stdout Contract

Explanation

PASS: The commit changes only 26 actions/checkout references in 14 GitHub workflow files, replacing the v7.0.0 SHA/comment with v7.0.1. No OTE binary, Go/Ginkgo suite setup, or process-level stdout code changed. The repository search found no OTE/OpenShift-tests references or relevant Go entrypoints, so no stated stdout violation was introduced.

Full details: Ipv6 And Disconnected Network Test Compatibility

Explanation

PASS: The pull request changes only 14 workflow files. The complete diff only replaces pinned actions/checkout SHAs and adds no Ginkgo tests or test networking code. Therefore, the IPv6 and disconnected-network test conditions do not apply.

Full details: No-Weak-Crypto

Explanation

PASS. The commit changes only 26 workflow reference lines, replacing the pinned actions/checkout commit with the v7.0.1 commit. The added lines contain no MD5, SHA-1, DES, 3DES, RC4, Blowfish, ECB, custom crypto, or secret/token comparison logic. The weak-crypto matches found elsewhere are pre-existing and are not changed by this commit.

Full details: Container-Privileges

Explanation

PASS. The pull request changes only pinned actions/checkout references in 14 GitHub workflow files. The diff contains 26 additions and 26 removals, with no other added lines. No changed file introduces privileged: true, hostPID, hostNetwork, hostIPC, SYS_ADMIN, allowPrivilegeEscalation: true, or root settings in a container/Kubernetes manifest.

Full details: No-Sensitive-Data-In-Logs

Explanation

PASS. The PR diff changes only the pinned actions/checkout SHA and version comment in 14 workflow files. It adds no logging commands or log output. The changed checkout blocks retain persist-credentials: false; existing secret references are passed to later actions and are not printed by this PR. Therefore, the PR does not introduce logging that exposes passwords, tokens, API keys, PII, session IDs, hostnames, or customer data.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/mintmaker/main/actions-checkout-7.x

---

_{Comment @coderabbitai help to get the list of available commands.}