From fa1aed0abceb8585482a1b8a7bb1149661e32dd9 Mon Sep 17 00:00:00 2001 From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com> Date: Sat, 26 Sep 2026 17:19:45 -0400 Subject: [PATCH] docs(review): retire security and cross-family review gates (#49) Security review and cross-family review are no longer merge gates. Deploy docs still require a job_workflow_ref update when a workflow is added. --- cicd.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cicd.md b/cicd.md index 6c8f12a..6a1679d 100644 --- a/cicd.md +++ b/cicd.md @@ -142,7 +142,7 @@ IAM role `githubdeploy-`, owned by workload Terraform. - `job_workflow_ref`: `Sea-Haven-Industries/.github/.github/workflows/cd-hcp-fargate.yaml@*` (and `cd-hcp-spa.yaml`) - `workflow_ref`: the thin caller still `Sea-Haven-Industries//.github/workflows/deploy-api.yaml@refs/heads/main` and `@refs/tags/v*` -Adding an app adds `workflow_ref` for that caller. Do not pin trust to only `ref:refs/heads/main`. +Adding an app still adds `workflow_ref` for that caller. Do not pin trust to only `ref:refs/heads/main`. **Permissions.** Only what the workflows write: