.github/workflows/ci-static.yaml

@@ -15,7 +15,7 @@ name: CI — Static Site
 # Caller example (build mode):
 #   jobs:
 #     ci:
-#       uses: Sea-Haven-Industries/.github/.github/workflows/ci-static.yaml@<full-commit-sha> # main
+#       uses: Sea-Haven-Industries/.github/.github/workflows/ci-static.yaml@main
 #       with:
 #         build-command: "npx @11ty/eleventy"
 #         check-dir: "_site"

.github/workflows/ci-typescript-frontend.yaml

@@ -13,7 +13,7 @@ name: CI — TypeScript Frontend
 # Caller example:
 #   jobs:
 #     ci:
-#       uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-frontend.yaml@<full-commit-sha> # main
+#       uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-frontend.yaml@main
 #       with:
 #         node-version: "24"
 

workflow-templates/cdk-deploy.yml

@@ -5,6 +5,6 @@ on:
 
 jobs:
   deploy:
-    uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@555d07c3a240689a81668026787eba089df4c975 # main
+    uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@main
     secrets:
       deploy-role-arn: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}

workflow-templates/ci-node.yml

@@ -5,4 +5,4 @@ on:
 
 jobs:
   ci:
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@555d07c3a240689a81668026787eba089df4c975 # main
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@main

workflow-templates/ci-python.yml

@@ -5,6 +5,6 @@ on:
 
 jobs:
   ci:
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@555d07c3a240689a81668026787eba089df4c975 # main
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@main
     with:
       run-tests: true

workflow-templates/dependency-review.yml

@@ -8,4 +8,4 @@ permissions:
 
 jobs:
   dependency-review:
-    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@555d07c3a240689a81668026787eba089df4c975 # main
+    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@main

workflow-templates/labeler.yml

@@ -13,4 +13,4 @@ permissions:
 
 jobs:
   label:
-    uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@555d07c3a240689a81668026787eba089df4c975 # main
+    uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@main

workflow-templates/sam-deploy.yml

@@ -5,16 +5,13 @@ on:
 
 jobs:
   deploy:
-    uses: Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml@555d07c3a240689a81668026787eba089df4c975 # main
+    uses: Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml@main
     with:
       # Required: the CloudFormation stack name (kebab-case, matches repo name).
       # NOTE: this is a literal placeholder on purpose — starter-workflow variables
       # like $default-branch substitute to the BRANCH name ("main"), not the repo name.
       stack-name: REPLACE-ME-stack-name
-      # Required: the CloudFormation execution role ARN for this stack — the
-      # github-cfn-execution-role in the repo's TARGET account (part of the
-      # per-account deploy substrate; the account must have it provisioned
-      # before first deploy). Do not point new repos at the management account.
-      cfn-role-arn: REPLACE-ME-cfn-role-arn
+      # Required: the CloudFormation execution role ARN for this stack.
+      cfn-role-arn: arn:aws:iam::328440206208:role/github-cfn-execution-role
     secrets:
       deploy-role-arn: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}