Adam Moussa 09052fa91a chore: resolve open code scanning alerts (#58) ... * ci: add least-privilege permissions blocks to workflow callers Resolves code scanning alerts #9 and #11 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match. * fix: turn off debug mode in Flask app configuration. Resolves code scanning alert #2 (Flask app is run in debug mode) * ci: bump reusable workflow pin to f71002a (ruff 0.15.22 pin) Picks up Sea-Haven-Industries/.github#88, which pins ruff in ci-python-sam so unpinned installs no longer float to new releases with changed default rule sets (0.16.0 broke CI with 89 pre-existing findings). Refs Sea-Haven-Industries/.github#87.		2026-07-23 20:00:47 +00:00
..
ci.yml	chore: resolve open code scanning alerts (#58)	2026-07-23 20:00:47 +00:00
dependency-review.yml	chore: resolve open code scanning alerts (#58)	2026-07-23 20:00:47 +00:00
deploy.yml	chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) (#38)	2026-07-06 18:27:47 -04:00
labeler.yml	chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) (#38)	2026-07-06 18:27:47 -04:00
weekly-menu.yml	Bump aws-actions/configure-aws-credentials in the minor-and-patch group (#41)	2026-07-13 12:25:06 -04:00