.github

adam/.github

Fork 0

mirror of https://github.com/Sea-Haven-Industries/.github.git synced 2026-09-30 04:43:12 +00:00

Commit graph

9aa67bd806

fix(policy): preserve line-specific violation fingerprints Cursor Agent 2026-08-04 00:26:10 +00:00
7399fb6577

fix(policy): reject uses block scalar action refs Cursor Agent 2026-08-04 00:20:39 +00:00
514464637e

fix(ci): close remaining workflow policy bypasses docs/cursor-convention-alignment Adam Moussa 2026-08-03 20:14:01 -04:00
0bc443e766

fix(ci): scan copied workflow files Adam Moussa 2026-08-03 19:52:30 -04:00
f5925d3fd2

fix(ci): address PR policy security review Adam Moussa 2026-08-03 19:44:57 -04:00
d3daa9579e

fix(ci): grandfather unchanged workflow policy debt Adam Moussa 2026-08-03 19:32:18 -04:00
5954557ef0

ci: add deterministic PR policy gate Adam Moussa 2026-08-03 19:15:30 -04:00
d9a8c7fd8f

docs: align organization templates with Cursor conventions Adam Moussa 2026-08-03 17:36:56 -04:00
b94062bd86

fix(iam): grant weekly-menu role execute-api invoke (#114) Adam Moussa 2026-08-03 15:32:35 -04:00
eeee7d014c

fix(iam): grant weekly-menu role execute-api invoke Adam Moussa 2026-08-03 15:29:07 -04:00
81cf168170

fix(deploy): recover SAM stacks after update rollback v1.0.4 Adam Moussa 2026-08-03 14:38:39 -04:00
5d68ab3507

docs(iam): clarify boundary rollback recovery Adam Moussa 2026-08-03 14:36:17 -04:00
8d85b2c396

fix(deploy): recover SAM stacks after update rollback Adam Moussa 2026-08-03 14:34:45 -04:00
9a7171a855

Merge pull request #112 from Sea-Haven-Industries/docs/readme-pinning-and-catalog Adam Moussa 2026-07-29 13:02:55 -04:00
ca5dae6aff

docs: align README pinning policy with SHA-pin convention and complete the catalog Adam Moussa 2026-07-29 13:00:53 -04:00
18e207a799

Merge pull request #111 from Sea-Haven-Industries/feat/weekly-menu-scoped-role Adam Moussa 2026-07-28 19:24:29 -04:00
c2c1b80b60

feat(iam): add scoped OIDC role for the meal-order-manager weekly-menu job Adam Moussa 2026-07-28 18:58:51 -04:00
3f74677422

Merge pull request #110 from Sea-Haven-Industries/fix/ci-ts-cdk-npm-test v1.0.3 Adam Moussa 2026-07-28 18:46:15 -04:00
93a370bfa8 fix(ci): run npm test instead of hardcoded npx jest in ci-typescript-cdk Adam Moussa 2026-07-28 18:44:30 -04:00
3620c84cbb

Merge pull request #109 from Sea-Haven-Industries/fix/audit-github-script Adam Moussa 2026-07-28 18:40:58 -04:00
e2c43bd4ee ci(templates): pin github-script to v9.0.0 in the triage starter Adam Moussa 2026-07-28 18:37:45 -04:00
0170a57c0d

Merge pull request #108 from Sea-Haven-Industries/fix/reusable-concurrency-job-key v1.0.2 Adam Moussa 2026-07-28 17:26:19 -04:00
a394b54f82

fix(ci): key multi-job reusable concurrency on a literal job id Adam Moussa 2026-07-28 17:22:51 -04:00
880ba803d2

Merge pull request #107 from Sea-Haven-Industries/docs/release-reusable-caller-note v1.0.1 Adam Moussa 2026-07-28 17:15:11 -04:00
7c0c6ab984

docs(release): point the reusable at this repo's own caller Adam Moussa 2026-07-28 17:13:44 -04:00
2fbfb2e7cf

Merge pull request #106 from Sea-Haven-Industries/feat/release-on-reusable-change v1.0.0 Adam Moussa 2026-07-28 17:05:28 -04:00
34977d2457

feat(release): cut a tag and release when a reusable workflow changes Adam Moussa 2026-07-28 17:01:44 -04:00
0fd7ecf2a5

Merge pull request #105 from Sea-Haven-Industries/feat/release-workflow-and-ios-ci Adam Moussa 2026-07-28 16:50:06 -04:00
ead0b6cf6c

feat(workflow-templates): add release and ci-mobile-ios templates, pass node-version on ci-python Adam Moussa 2026-07-28 15:57:17 -04:00
9389e51c10

feat(workflows): add release and ci-mobile-ios reusable workflows Adam Moussa 2026-07-28 15:55:43 -04:00
7a8243248b

Merge pull request #103 from Sea-Haven-Industries/chore/cd-concurrency-groups Adam Moussa 2026-07-28 12:59:32 -04:00
eed8c97e79

Merge branch 'main' into chore/cd-concurrency-groups Adam Moussa 2026-07-28 12:55:57 -04:00
bcaeaf7759

Merge pull request #104 from Sea-Haven-Industries/ci/enable-actionlint-shellcheck Adam Moussa 2026-07-28 12:55:26 -04:00
c286a98514

Merge branch 'main' into ci/enable-actionlint-shellcheck Adam Moussa 2026-07-28 12:54:23 -04:00
62254a7837

Merge pull request #102 from Sea-Haven-Industries/fix/workflow-expression-injection Adam Moussa 2026-07-28 12:53:28 -04:00
3de50b94a0

Merge branch 'main' into fix/workflow-expression-injection Adam Moussa 2026-07-28 12:51:58 -04:00
149ac1c79a

Merge pull request #101 from Sea-Haven-Industries/chore/remove-retired-review-tooling Adam Moussa 2026-07-28 12:47:24 -04:00
5889d52333

ci: enable actionlint's shellcheck integration in self-CI Adam Moussa 2026-07-28 12:46:17 -04:00
8d8d832757

Merge branch 'main' into chore/remove-retired-review-tooling Adam Moussa 2026-07-28 12:45:27 -04:00
8b041d6306

Merge pull request #100 from Sea-Haven-Industries/feature/starter-workflow-catalog-gaps Adam Moussa 2026-07-28 12:43:44 -04:00
04f4f875b9

Merge branch 'main' into feature/starter-workflow-catalog-gaps Adam Moussa 2026-07-28 12:41:04 -04:00
8b8fc1ac46

ci: add job-level concurrency to the cd-cdk, cd-sam and iOS deploys Adam Moussa 2026-07-28 12:34:17 -04:00
7ece0b6c2a

fix(ci): pass deploy inputs via env, not shell interpolation Adam Moussa 2026-07-28 12:35:00 -04:00
8344efb902

ci: add starter workflows for the five uncovered reusables Adam Moussa 2026-07-28 12:34:29 -04:00
af2ee942ce

chore: remove retired pr-review and compliance-audit tooling Adam Moussa 2026-07-28 12:34:26 -04:00
3bdf11cd69

Merge pull request #99 from Sea-Haven-Industries/ci/harden-reusable-ci-permissions Adam Moussa 2026-07-28 12:23:08 -04:00
1562cbda8e

ci: scope the three reusable CI workflows to contents:read Adam Moussa 2026-07-28 12:13:07 -04:00
2139662f5a

Merge pull request #98 from Sea-Haven-Industries/fix/cfn-exec-role-phase-b Adam Moussa 2026-07-27 18:23:01 -04:00
6c9582f242

fix(iam): drop the redundant inline boundary-gated policy (Phase B) Adam Moussa 2026-07-27 18:20:48 -04:00
eb20573a8b

Merge pull request #95 from Sea-Haven-Industries/fix/cfn-exec-role-boundary-deny Adam Moussa 2026-07-27 18:14:57 -04:00
f0a2b7191d

fix(iam): close boundary-removal escalation in github-cfn-execution-role (Phase A) Adam Moussa 2026-07-27 17:44:58 -04:00
0df5ee3955

Merge pull request #97 from Sea-Haven-Industries/fix/remove-slack-bot-role-step2 Adam Moussa 2026-07-27 18:06:43 -04:00
e009d3c65f

fix(iam): drop the decommissioned slack-bot deploy role from the stack (step 2/2) Adam Moussa 2026-07-27 18:04:47 -04:00
2ec783052a

Merge pull request #96 from Sea-Haven-Industries/fix/remove-decommissioned-slack-bot-role Adam Moussa 2026-07-27 18:02:55 -04:00
2f232b6efd

fix(iam): stop the decommissioned slack-bot role breaking every stack update Adam Moussa 2026-07-27 18:00:38 -04:00
b7d7be2727

Merge pull request #94 from Sea-Haven-Industries/cd/add-dotnet-eb Adam Moussa 2026-07-27 17:28:56 -04:00
8c3487b6bc

ci(cd-dotnet-eb): add reusable CD workflow for .NET on Elastic Beanstalk Adam Moussa 2026-07-27 17:24:36 -04:00
a39585b60d

Merge pull request #93 from Sea-Haven-Industries/ci/sam-deploy-template-role-placeholder Adam Moussa 2026-07-27 16:34:52 -04:00
5a5ab684f6

ci(templates): replace hardcoded management-account role ARN with placeholder Adam Moussa 2026-07-27 16:03:25 -04:00
786dcfe8d9

Merge pull request #92 from Sea-Haven-Industries/ci/sha-pin-workflow-refs Adam Moussa 2026-07-27 15:39:54 -04:00
69b28c6f3a

ci: pin workflow-template refs to commit SHA Adam Moussa 2026-07-27 15:38:18 -04:00
555d07c3a2

Bump actions/labeler from 6.2.0 to 7.0.0 (#91) dependabot[bot] 2026-07-27 14:08:27 -04:00
a0c6aeacab

Bump actions/labeler from 6.2.0 to 7.0.0 dependabot[bot] 2026-07-27 17:55:06 +00:00
265889fb69

Bump the minor-and-patch group with 3 updates (#90) dependabot[bot] 2026-07-27 13:53:57 -04:00
e9e748c079

Bump the minor-and-patch group with 3 updates dependabot[bot] 2026-07-27 17:46:48 +00:00
07ce007bad

ci(dependency-review): add optional allow-ghsas pass-through input (#89) Adam Moussa 2026-07-27 13:35:47 -04:00
80786a4a93

ci(dependency-review): add optional allow-ghsas pass-through input Adam Moussa 2026-07-27 13:23:41 -04:00
f71002a9ed

fix: pin ruff to 0.15.22 in ci-python-sam and ci-python-app workflows (#88) seahaven-openswe[bot] 2026-07-23 15:51:07 -04:00
117cf3a5b0 fix: pin ruff to 0.15.22 in ci-python-sam and ci-python-app workflows amoussa1229 2026-07-23 19:48:29 +00:00
7b34404e40

fix/dependency-review-permissions (#86) Adam Moussa 2026-07-23 11:54:59 -04:00
a9304e5706

Merge branch 'main' into fix/dependency-review-permissions Adam Moussa 2026-07-23 11:53:51 -04:00
a66b043afc

fix: update dependency-review.yml template to match callable permissions Adam Moussa 2026-07-23 11:52:55 -04:00
b89cd48d80

fix: drop pull-requests: write and 'comment-summary-in-pr: on-failure' Adam Moussa 2026-07-23 11:43:33 -04:00
d61d921e9a

fix(iam): grant deploy roles s3 encryption-config actions (#84) Adam Moussa 2026-07-22 16:17:38 -04:00
1b21945c6e fix(iam): grant deploy roles s3 encryption-config actions Adam Moussa 2026-07-22 16:11:12 -04:00
a960fd8fd7

ci: batch Dependabot setup-action major bumps (#80, #81, #82) (#83) Adam Moussa 2026-07-22 12:34:38 -04:00
b4e9e1d174

Bump actions/setup-node from 6 to 7 dependabot[bot] 2026-07-21 19:35:29 +00:00
3a91afc1ec

Bump actions/setup-python from 6 to 7 dependabot[bot] 2026-07-21 19:35:34 +00:00
4e87208547

Bump actions/setup-dotnet from 5 to 6 dependabot[bot] 2026-07-21 19:35:26 +00:00
b3fca41448

Bump actions/setup-python from 6 to 7 dependabot[bot] 2026-07-21 19:35:34 +00:00
66b6daae28

Bump actions/setup-node from 6 to 7 dependabot[bot] 2026-07-21 19:35:29 +00:00
1b4678df84

Bump actions/setup-dotnet from 5 to 6 dependabot[bot] 2026-07-21 19:35:26 +00:00
1bb634d78d

Bump the minor-and-patch group with 2 updates (#79) dependabot[bot] 2026-07-21 15:33:24 -04:00
779f8e7989

Bump the minor-and-patch group with 2 updates dependabot[bot] 2026-07-20 17:46:33 +00:00
18b37b7eab

Remove rename-transition sub from account-baseline deploy role (#78) Adam Moussa 2026-07-14 13:55:56 -04:00
959ce944ef

Remove rename-transition sub from account-baseline deploy role Adam Moussa 2026-07-14 13:54:24 -04:00
3cde673b9d

cd-cdk stacks input + org-baseline rename trust pair (#77) Adam Moussa 2026-07-14 13:47:56 -04:00
18b602c975

Pass stacks selector via env var, not expression interpolation Adam Moussa 2026-07-14 13:44:33 -04:00
fc86079df9

Trust seahaven-org-baseline sub on account-baseline deploy role Adam Moussa 2026-07-14 13:27:42 -04:00
bb1c5f2e44

Add stacks input to cd-cdk for multi-account apps Adam Moussa 2026-07-14 13:27:42 -04:00
4505931ad8

Bump the minor-and-patch group with 3 updates (#75) dependabot[bot] 2026-07-13 14:48:15 -04:00
672d651a77

chore(security): add tracked repo-local suppressions for oidc-deploy-roles findings Adam Moussa 2026-07-13 14:24:29 -04:00
bf832fbb46

Bump the minor-and-patch group with 3 updates dependabot[bot] 2026-07-13 17:51:20 +00:00
9fa0a71564

ci: add concurrency to ci-python-app + fix sam-deploy template (INFRA-136) (#74) Adam Moussa 2026-07-08 16:32:40 -04:00
71447a20a7

ci: add concurrency to ci-python-app + fix sam-deploy template (INFRA-136) Adam Moussa 2026-07-08 16:28:32 -04:00
fc75158c94

docs: refresh .github README and workflow-templates (INFRA-142) (#73) Adam Moussa 2026-07-08 16:21:37 -04:00
b8d31932c1

docs: refresh .github README and workflow-templates (INFRA-142) Adam Moussa 2026-07-08 16:17:13 -04:00
4eff8bbc6d

chore(ci): SHA-pin mutable-tag third-party actions (INFRA-118) (#72) Adam Moussa 2026-07-06 18:26:29 -04:00
4cc1e69dff

chore(ci): SHA-pin mutable-tag third-party actions (INFRA-118) Adam Moussa 2026-07-06 17:56:42 -04:00
fd60e4c904

Bump the minor-and-patch group with 2 updates (#71) dependabot[bot] 2026-07-06 17:31:55 -04:00