Commit graph

  • 9aa67bd806
    fix(policy): preserve line-specific violation fingerprints Cursor Agent 2026-08-04 00:26:10 +00:00
  • 7399fb6577
    fix(policy): reject uses block scalar action refs Cursor Agent 2026-08-04 00:20:39 +00:00
  • 514464637e
    fix(ci): close remaining workflow policy bypasses docs/cursor-convention-alignment Adam Moussa 2026-08-03 20:14:01 -04:00
  • 0bc443e766
    fix(ci): scan copied workflow files Adam Moussa 2026-08-03 19:52:30 -04:00
  • f5925d3fd2
    fix(ci): address PR policy security review Adam Moussa 2026-08-03 19:44:57 -04:00
  • d3daa9579e
    fix(ci): grandfather unchanged workflow policy debt Adam Moussa 2026-08-03 19:32:18 -04:00
  • 5954557ef0
    ci: add deterministic PR policy gate Adam Moussa 2026-08-03 19:15:30 -04:00
  • d9a8c7fd8f
    docs: align organization templates with Cursor conventions Adam Moussa 2026-08-03 17:36:56 -04:00
  • b94062bd86
    fix(iam): grant weekly-menu role execute-api invoke (#114) Adam Moussa 2026-08-03 15:32:35 -04:00
  • eeee7d014c
    fix(iam): grant weekly-menu role execute-api invoke Adam Moussa 2026-08-03 15:29:07 -04:00
  • 81cf168170
    fix(deploy): recover SAM stacks after update rollback v1.0.4 Adam Moussa 2026-08-03 14:38:39 -04:00
  • 5d68ab3507
    docs(iam): clarify boundary rollback recovery Adam Moussa 2026-08-03 14:36:17 -04:00
  • 8d85b2c396
    fix(deploy): recover SAM stacks after update rollback Adam Moussa 2026-08-03 14:34:45 -04:00
  • 9a7171a855
    Merge pull request #112 from Sea-Haven-Industries/docs/readme-pinning-and-catalog Adam Moussa 2026-07-29 13:02:55 -04:00
  • ca5dae6aff
    docs: align README pinning policy with SHA-pin convention and complete the catalog Adam Moussa 2026-07-29 13:00:53 -04:00
  • 18e207a799
    Merge pull request #111 from Sea-Haven-Industries/feat/weekly-menu-scoped-role Adam Moussa 2026-07-28 19:24:29 -04:00
  • c2c1b80b60
    feat(iam): add scoped OIDC role for the meal-order-manager weekly-menu job Adam Moussa 2026-07-28 18:58:51 -04:00
  • 3f74677422
    Merge pull request #110 from Sea-Haven-Industries/fix/ci-ts-cdk-npm-test v1.0.3 Adam Moussa 2026-07-28 18:46:15 -04:00
  • 93a370bfa8 fix(ci): run npm test instead of hardcoded npx jest in ci-typescript-cdk Adam Moussa 2026-07-28 18:44:30 -04:00
  • 3620c84cbb
    Merge pull request #109 from Sea-Haven-Industries/fix/audit-github-script Adam Moussa 2026-07-28 18:40:58 -04:00
  • e2c43bd4ee ci(templates): pin github-script to v9.0.0 in the triage starter Adam Moussa 2026-07-28 18:37:45 -04:00
  • 0170a57c0d
    Merge pull request #108 from Sea-Haven-Industries/fix/reusable-concurrency-job-key v1.0.2 Adam Moussa 2026-07-28 17:26:19 -04:00
  • a394b54f82
    fix(ci): key multi-job reusable concurrency on a literal job id Adam Moussa 2026-07-28 17:22:51 -04:00
  • 880ba803d2
    Merge pull request #107 from Sea-Haven-Industries/docs/release-reusable-caller-note v1.0.1 Adam Moussa 2026-07-28 17:15:11 -04:00
  • 7c0c6ab984
    docs(release): point the reusable at this repo's own caller Adam Moussa 2026-07-28 17:13:44 -04:00
  • 2fbfb2e7cf
    Merge pull request #106 from Sea-Haven-Industries/feat/release-on-reusable-change v1.0.0 Adam Moussa 2026-07-28 17:05:28 -04:00
  • 34977d2457
    feat(release): cut a tag and release when a reusable workflow changes Adam Moussa 2026-07-28 17:01:44 -04:00
  • 0fd7ecf2a5
    Merge pull request #105 from Sea-Haven-Industries/feat/release-workflow-and-ios-ci Adam Moussa 2026-07-28 16:50:06 -04:00
  • ead0b6cf6c
    feat(workflow-templates): add release and ci-mobile-ios templates, pass node-version on ci-python Adam Moussa 2026-07-28 15:57:17 -04:00
  • 9389e51c10
    feat(workflows): add release and ci-mobile-ios reusable workflows Adam Moussa 2026-07-28 15:55:43 -04:00
  • 7a8243248b
    Merge pull request #103 from Sea-Haven-Industries/chore/cd-concurrency-groups Adam Moussa 2026-07-28 12:59:32 -04:00
  • eed8c97e79
    Merge branch 'main' into chore/cd-concurrency-groups Adam Moussa 2026-07-28 12:55:57 -04:00
  • bcaeaf7759
    Merge pull request #104 from Sea-Haven-Industries/ci/enable-actionlint-shellcheck Adam Moussa 2026-07-28 12:55:26 -04:00
  • c286a98514
    Merge branch 'main' into ci/enable-actionlint-shellcheck Adam Moussa 2026-07-28 12:54:23 -04:00
  • 62254a7837
    Merge pull request #102 from Sea-Haven-Industries/fix/workflow-expression-injection Adam Moussa 2026-07-28 12:53:28 -04:00
  • 3de50b94a0
    Merge branch 'main' into fix/workflow-expression-injection Adam Moussa 2026-07-28 12:51:58 -04:00
  • 149ac1c79a
    Merge pull request #101 from Sea-Haven-Industries/chore/remove-retired-review-tooling Adam Moussa 2026-07-28 12:47:24 -04:00
  • 5889d52333
    ci: enable actionlint's shellcheck integration in self-CI Adam Moussa 2026-07-28 12:46:17 -04:00
  • 8d8d832757
    Merge branch 'main' into chore/remove-retired-review-tooling Adam Moussa 2026-07-28 12:45:27 -04:00
  • 8b041d6306
    Merge pull request #100 from Sea-Haven-Industries/feature/starter-workflow-catalog-gaps Adam Moussa 2026-07-28 12:43:44 -04:00
  • 04f4f875b9
    Merge branch 'main' into feature/starter-workflow-catalog-gaps Adam Moussa 2026-07-28 12:41:04 -04:00
  • 8b8fc1ac46
    ci: add job-level concurrency to the cd-cdk, cd-sam and iOS deploys Adam Moussa 2026-07-28 12:34:17 -04:00
  • 7ece0b6c2a
    fix(ci): pass deploy inputs via env, not shell interpolation Adam Moussa 2026-07-28 12:35:00 -04:00
  • 8344efb902
    ci: add starter workflows for the five uncovered reusables Adam Moussa 2026-07-28 12:34:29 -04:00
  • af2ee942ce
    chore: remove retired pr-review and compliance-audit tooling Adam Moussa 2026-07-28 12:34:26 -04:00
  • 3bdf11cd69
    Merge pull request #99 from Sea-Haven-Industries/ci/harden-reusable-ci-permissions Adam Moussa 2026-07-28 12:23:08 -04:00
  • 1562cbda8e
    ci: scope the three reusable CI workflows to contents:read Adam Moussa 2026-07-28 12:13:07 -04:00
  • 2139662f5a
    Merge pull request #98 from Sea-Haven-Industries/fix/cfn-exec-role-phase-b Adam Moussa 2026-07-27 18:23:01 -04:00
  • 6c9582f242
    fix(iam): drop the redundant inline boundary-gated policy (Phase B) Adam Moussa 2026-07-27 18:20:48 -04:00
  • eb20573a8b
    Merge pull request #95 from Sea-Haven-Industries/fix/cfn-exec-role-boundary-deny Adam Moussa 2026-07-27 18:14:57 -04:00
  • f0a2b7191d
    fix(iam): close boundary-removal escalation in github-cfn-execution-role (Phase A) Adam Moussa 2026-07-27 17:44:58 -04:00
  • 0df5ee3955
    Merge pull request #97 from Sea-Haven-Industries/fix/remove-slack-bot-role-step2 Adam Moussa 2026-07-27 18:06:43 -04:00
  • e009d3c65f
    fix(iam): drop the decommissioned slack-bot deploy role from the stack (step 2/2) Adam Moussa 2026-07-27 18:04:47 -04:00
  • 2ec783052a
    Merge pull request #96 from Sea-Haven-Industries/fix/remove-decommissioned-slack-bot-role Adam Moussa 2026-07-27 18:02:55 -04:00
  • 2f232b6efd
    fix(iam): stop the decommissioned slack-bot role breaking every stack update Adam Moussa 2026-07-27 18:00:38 -04:00
  • b7d7be2727
    Merge pull request #94 from Sea-Haven-Industries/cd/add-dotnet-eb Adam Moussa 2026-07-27 17:28:56 -04:00
  • 8c3487b6bc
    ci(cd-dotnet-eb): add reusable CD workflow for .NET on Elastic Beanstalk Adam Moussa 2026-07-27 17:24:36 -04:00
  • a39585b60d
    Merge pull request #93 from Sea-Haven-Industries/ci/sam-deploy-template-role-placeholder Adam Moussa 2026-07-27 16:34:52 -04:00
  • 5a5ab684f6
    ci(templates): replace hardcoded management-account role ARN with placeholder Adam Moussa 2026-07-27 16:03:25 -04:00
  • 786dcfe8d9
    Merge pull request #92 from Sea-Haven-Industries/ci/sha-pin-workflow-refs Adam Moussa 2026-07-27 15:39:54 -04:00
  • 69b28c6f3a
    ci: pin workflow-template refs to commit SHA Adam Moussa 2026-07-27 15:38:18 -04:00
  • 555d07c3a2
    Bump actions/labeler from 6.2.0 to 7.0.0 (#91) dependabot[bot] 2026-07-27 14:08:27 -04:00
  • a0c6aeacab
    Bump actions/labeler from 6.2.0 to 7.0.0 dependabot[bot] 2026-07-27 17:55:06 +00:00
  • 265889fb69
    Bump the minor-and-patch group with 3 updates (#90) dependabot[bot] 2026-07-27 13:53:57 -04:00
  • e9e748c079
    Bump the minor-and-patch group with 3 updates dependabot[bot] 2026-07-27 17:46:48 +00:00
  • 07ce007bad
    ci(dependency-review): add optional allow-ghsas pass-through input (#89) Adam Moussa 2026-07-27 13:35:47 -04:00
  • 80786a4a93
    ci(dependency-review): add optional allow-ghsas pass-through input Adam Moussa 2026-07-27 13:23:41 -04:00
  • f71002a9ed
    fix: pin ruff to 0.15.22 in ci-python-sam and ci-python-app workflows (#88) seahaven-openswe[bot] 2026-07-23 15:51:07 -04:00
  • 117cf3a5b0 fix: pin ruff to 0.15.22 in ci-python-sam and ci-python-app workflows amoussa1229 2026-07-23 19:48:29 +00:00
  • 7b34404e40
    fix/dependency-review-permissions (#86) Adam Moussa 2026-07-23 11:54:59 -04:00
  • a9304e5706
    Merge branch 'main' into fix/dependency-review-permissions Adam Moussa 2026-07-23 11:53:51 -04:00
  • a66b043afc
    fix: update dependency-review.yml template to match callable permissions Adam Moussa 2026-07-23 11:52:55 -04:00
  • b89cd48d80
    fix: drop pull-requests: write and 'comment-summary-in-pr: on-failure' Adam Moussa 2026-07-23 11:43:33 -04:00
  • d61d921e9a
    fix(iam): grant deploy roles s3 encryption-config actions (#84) Adam Moussa 2026-07-22 16:17:38 -04:00
  • 1b21945c6e fix(iam): grant deploy roles s3 encryption-config actions Adam Moussa 2026-07-22 16:11:12 -04:00
  • a960fd8fd7
    ci: batch Dependabot setup-action major bumps (#80, #81, #82) (#83) Adam Moussa 2026-07-22 12:34:38 -04:00
  • b4e9e1d174
    Bump actions/setup-node from 6 to 7 dependabot[bot] 2026-07-21 19:35:29 +00:00
  • 3a91afc1ec
    Bump actions/setup-python from 6 to 7 dependabot[bot] 2026-07-21 19:35:34 +00:00
  • 4e87208547
    Bump actions/setup-dotnet from 5 to 6 dependabot[bot] 2026-07-21 19:35:26 +00:00
  • b3fca41448
    Bump actions/setup-python from 6 to 7 dependabot[bot] 2026-07-21 19:35:34 +00:00
  • 66b6daae28
    Bump actions/setup-node from 6 to 7 dependabot[bot] 2026-07-21 19:35:29 +00:00
  • 1b4678df84
    Bump actions/setup-dotnet from 5 to 6 dependabot[bot] 2026-07-21 19:35:26 +00:00
  • 1bb634d78d
    Bump the minor-and-patch group with 2 updates (#79) dependabot[bot] 2026-07-21 15:33:24 -04:00
  • 779f8e7989
    Bump the minor-and-patch group with 2 updates dependabot[bot] 2026-07-20 17:46:33 +00:00
  • 18b37b7eab
    Remove rename-transition sub from account-baseline deploy role (#78) Adam Moussa 2026-07-14 13:55:56 -04:00
  • 959ce944ef
    Remove rename-transition sub from account-baseline deploy role Adam Moussa 2026-07-14 13:54:24 -04:00
  • 3cde673b9d
    cd-cdk stacks input + org-baseline rename trust pair (#77) Adam Moussa 2026-07-14 13:47:56 -04:00
  • 18b602c975
    Pass stacks selector via env var, not expression interpolation Adam Moussa 2026-07-14 13:44:33 -04:00
  • fc86079df9
    Trust seahaven-org-baseline sub on account-baseline deploy role Adam Moussa 2026-07-14 13:27:42 -04:00
  • bb1c5f2e44
    Add stacks input to cd-cdk for multi-account apps Adam Moussa 2026-07-14 13:27:42 -04:00
  • 4505931ad8
    Bump the minor-and-patch group with 3 updates (#75) dependabot[bot] 2026-07-13 14:48:15 -04:00
  • 672d651a77
    chore(security): add tracked repo-local suppressions for oidc-deploy-roles findings Adam Moussa 2026-07-13 14:24:29 -04:00
  • bf832fbb46
    Bump the minor-and-patch group with 3 updates dependabot[bot] 2026-07-13 17:51:20 +00:00
  • 9fa0a71564
    ci: add concurrency to ci-python-app + fix sam-deploy template (INFRA-136) (#74) Adam Moussa 2026-07-08 16:32:40 -04:00
  • 71447a20a7
    ci: add concurrency to ci-python-app + fix sam-deploy template (INFRA-136) Adam Moussa 2026-07-08 16:28:32 -04:00
  • fc75158c94
    docs: refresh .github README and workflow-templates (INFRA-142) (#73) Adam Moussa 2026-07-08 16:21:37 -04:00
  • b8d31932c1
    docs: refresh .github README and workflow-templates (INFRA-142) Adam Moussa 2026-07-08 16:17:13 -04:00
  • 4eff8bbc6d
    chore(ci): SHA-pin mutable-tag third-party actions (INFRA-118) (#72) Adam Moussa 2026-07-06 18:26:29 -04:00
  • 4cc1e69dff
    chore(ci): SHA-pin mutable-tag third-party actions (INFRA-118) Adam Moussa 2026-07-06 17:56:42 -04:00
  • fd60e4c904
    Bump the minor-and-patch group with 2 updates (#71) dependabot[bot] 2026-07-06 17:31:55 -04:00