dependabot[bot]
a9ea3a4dcd
chore(deps): bump the minor-and-patch group with 5 updates
...
Bumps the minor-and-patch group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.3` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.3` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.3` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.3` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.5` | `1.0.7` |
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.3 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](9c1ecf9428...e5691d8a7f
2026-08-13 18:54:41 +00:00
dependabot[bot]
6a31a4549c
chore(deps): bump the minor-and-patch group with 4 updates ( #41 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422
2026-08-04 18:25:30 -04:00
Adam Moussa
300fdab3bb
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 17:57:51 -04:00
Adam Moussa
299ead89b3
chore: resolve open code scanning alerts (URL host matching + workflow permissions) ( #36 )
...
Deploy / deploy (push) Waiting to run
* fix: Refactor `comment_intent` to use `_contains_url_with_host` for URL host matching.
* ci: add least-privilege permissions blocks to workflow callers
Resolves code scanning alerts #4 and #5 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match.
2026-07-23 19:10:45 +00:00
Adam Moussa
27dd15c541
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #30 )
Deploy / deploy (push) Has been cancelled
2026-07-06 18:27:14 -04:00
Adam Moussa
e8f375b03b
Add dependency-review caller workflow ( #18 )
...
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
2026-06-05 12:26:32 -04:00
