fix docker-verify-refreshed-at-updated workflow

[kernelsam]

Add pull-requests: read permission to docker-verify-refreshed-at-updated.yaml and remove incorrectly named verify-dockerfile-refreshed-at-updated.yaml.

[github-actions]

🤖 Claude Code Review

I'll proceed with the review based on the diff provided and standard Senzing code review practices.

---

Code Review: docker-verify-refreshed-at-updated.yaml

Summary

This PR renames .github/workflows/verify-dockerfile-refreshed-at-updated.yaml to .github/workflows/docker-verify-refreshed-at-updated.yaml and adds branch filtering, concurrency controls, and a workflow name update.

---

Code Quality

✅ No commented-out code — None present.

✅ Meaningful variable names — Standard GitHub Actions expressions used correctly.

✅ DRY principle — Not applicable for this small change.

✅ No defects identified — The concurrency group uses ${{ github.head_ref || github.ref_name }}, which is the correct pattern: head_ref is set for PRs, ref_name as fallback. This is correct.

✅ branches: [main] filter — Appropriate to restrict the trigger to PRs targeting main.

✅ Workflow rename — The file rename from verify-dockerfile-refreshed-at-updated.yaml to docker-verify-refreshed-at-updated.yaml aligns with the naming convention update in the workflow name field (Docker verify REFRESHED_AT Updated). Consistent.

---

Testing

N/A — This is a CI workflow configuration change. No unit/integration tests apply.

---

Documentation

✅ No README/API doc changes needed — Workflow rename is internal CI infrastructure.

⚠️ CHANGELOG.md — Cannot confirm from the diff whether CHANGELOG.md was updated. If this project maintains a changelog, this rename and behavioral change (adding branches filter and concurrency) should be documented.

---

Security

✅ No hardcoded credentials — None present.

✅ permissions: {} — Retains the locked-down permissions block. Good.

✅ No sensitive data — Not applicable.

✅ No .lic files — None present.

---

Minor Observation

The name field uses mixed casing: Docker verify REFRESHED_AT Updated. The previous name was Verify Dockerfile REFRESHED_AT Updated. Both are acceptable, but if there is a naming convention across other workflows in this repo, consistency should be verified.

---

Verdict

Approved with minor note. The changes are correct and improve the workflow by:

1. Scoping triggers to main branch PRs only.
2. Adding concurrency control to cancel redundant runs.

Confirm CHANGELOG.md is updated if the project maintains one.

Automated code review analyzing defects and coding standards

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter