chore(ci): adopt workflows v1.2.1 for repository scans #16

Merged

gitchegumi merged 1 commit from kiyi/adopt-workflows-v1.2.1 into main

2026-09-04 23:36:12 -05:00

kiyi commented

2026-09-04 23:22:14 -05:00

Member

Pin the self-scan workflow and library_ref to v1.2.1 so repository IaC scans use occurrence-specific fingerprints. Update adoption examples and the existing contract expectation. Validation: 41 unit tests and 16 scaffold cases pass; git diff --check passes.

kiyi added 1 commit

2026-09-04 23:22:14 -05:00

chore(ci): adopt workflows v1.2.1 for repository scans

Repository security / security-1 (pull_request) Successful in 1m22s

Details

Repository security / security (pull_request) Successful in 0s

Details

Library checks / tests (pull_request) Successful in 2m18s

Details

605b34d8e2

Pin the self-scan workflow and library_ref to v1.2.1 so repository IaC scans use occurrence-specific fingerprints. Update adoption examples and the existing contract expectation. Validation: 41 unit tests and 16 scaffold cases pass; git diff --check passes.

portegumi approved these changes

2026-09-04 23:30:47 -05:00

portegumi left a comment

The repository self-scan moves both uses and library_ref together to the published immutable v1.2.1 tag at 62ddd420fbebc3eb05405fa9dcf553f538377557, so its IaC findings use the reviewed occurrence-specific fingerprint implementation. README and adoption guidance are aligned. All 41 Python 3.12 tests and 16 scaffold cases pass locally. The exact-head hosted security artifact reports passed: true, five exact mitigations, zero blockers, and zero scanner errors; all three hosted checks are green. The branch is current, mergeable, and git diff --check is clean. No blocking findings.

The repository self-scan moves both `uses` and `library_ref` together to the published immutable `v1.2.1` tag at `62ddd420fbebc3eb05405fa9dcf553f538377557`, so its IaC findings use the reviewed occurrence-specific fingerprint implementation. README and adoption guidance are aligned. All 41 Python 3.12 tests and 16 scaffold cases pass locally. The exact-head hosted security artifact reports `passed: true`, five exact mitigations, zero blockers, and zero scanner errors; all three hosted checks are green. The branch is current, mergeable, and `git diff --check` is clean. No blocking findings.

gitchegumi scheduled this pull request to auto merge when all checks succeed

2026-09-04 23:35:23 -05:00