dependabot[bot]
71e8d8694a
chore(deps): bump the minor-and-patch group with 5 updates ( #92 )
2026-08-18 18:18:28 -04:00
dependabot[bot]
b7b4b9c9f4
chore(deps): bump the minor-and-patch group with 5 updates ( #90 )
Deploy / deploy (push) Waiting to run
2026-08-11 18:22:39 -04:00
Adam Moussa
6b27713d3c
ci: run the test suite in CI ( #85 )
...
Deploy / deploy (push) Waiting to run
* ci: run the test suite in CI
* ci(deps): pin ci-typescript-cdk to v1.0.3 so run-tests uses npm test
2026-07-28 18:54:41 -04:00
dependabot[bot]
a5b2c27a0f
Bump the minor-and-patch group with 4 updates ( #83 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml` from 1.0.0 to 1.0.2
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](2fbfb2e7cf...0170a57c0dhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](2fbfb2e7cf...0170a57c0dhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](2fbfb2e7cf...0170a57c0dhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](2fbfb2e7cf...0170a57c0d
2026-07-28 17:42:45 -04:00
Adam Moussa
761367b457
chore(ci): pin central workflow refs to v1.0.0 ( #82 )
...
The four refs pointed at fd60e4c9 with a '# main' comment. That comment
names a branch, so Dependabot rendered its bump PR titles as two full
40-character SHAs. Sea-Haven-Industries/.github now publishes tags.
Repoints all four at 2fbfb2e (v1.0.0) and replaces the comment with the
version. Deliberately v1.0.0 rather than the current v1.0.2, so a
Dependabot run has a newer version to find.
2026-07-28 17:39:44 -04:00
Adam Moussa
849f33a0bc
chore: resolve open code-scanning alerts (workflow permissions + Gusto URL sanitization) ( #81 )
...
Deploy / deploy (push) Has been cancelled
* ci: add least-privilege permissions blocks to workflow callers
Resolves code scanning alerts #4 and #5 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match.
* enhance(email): improve detection of allowed Gusto URLs in email classification
Resolves code scanning alert #2
2026-07-23 20:38:07 +00:00
Adam Moussa
fc4b090bd5
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #58 )
Deploy / deploy (push) Has been cancelled
2026-07-06 18:27:02 -04:00
Adam Moussa
d813e76a78
Add CI workflow ( #24 )
2026-05-08 15:49:44 -04:00
