From f4712e0bcf7b43c70eeda788d501988dd2b3ea50 Mon Sep 17 00:00:00 2001 From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com> Date: Tue, 28 Jul 2026 18:15:29 -0400 Subject: [PATCH] ci(deps): pin org reusable workflows to v1.0.2 (#190) * ci(deps): pin org reusable workflows to v1.0.2 * style(ci): normalize workflow block spacing --- .github/workflows/ci.yaml | 2 +- .github/workflows/dependency-review.yml | 4 +++- .github/workflows/deploy.yaml | 2 +- .github/workflows/labeler.yml | 4 +++- 4 files changed, 8 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index f351bfa..ec845ab 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -8,7 +8,7 @@ permissions: jobs: ci: - uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@f71002a9ed2938730b683249b28059c92a081af6 + uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2 with: source-dirs: "src/slack-bot src/weekly-post src/roster-sync src/ring-scheduler src/shared/shared tests" run-tests: true diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 0fa94ff..b51fba4 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -1,8 +1,10 @@ name: Dependency Review on: pull_request: + permissions: contents: read + jobs: review: - uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@fd60e4c9041784f666ac0fdefb9bec3c7fbf5143 # main + uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2 diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml index 77d1462..defe716 100644 --- a/.github/workflows/deploy.yaml +++ b/.github/workflows/deploy.yaml @@ -13,7 +13,7 @@ concurrency: jobs: deploy: - uses: Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml@fd60e4c9041784f666ac0fdefb9bec3c7fbf5143 # main + uses: Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2 with: stack-name: afterhours-shift-manager cfn-role-arn: arn:aws:iam::328440206208:role/github-cfn-execution-role diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 46b1dc8..daa7bf9 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -2,10 +2,12 @@ name: Labeler on: pull_request: branches: [main] + permissions: contents: read pull-requests: write issues: write + jobs: label: - uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@fd60e4c9041784f666ac0fdefb9bec3c7fbf5143 # main + uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2