ci: pin reusable-workflow refs to commit SHA (#259)

Pins all eight central reusable-workflow refs (ci, deploy, deploy-mobile,
labeler) to the current .github main tip per the SHA-pin convention
(engineering-handbook PR #18). Dependabot github-actions updates advance
the pins weekly.
This commit is contained in:
Adam Moussa 2026-07-27 15:44:52 -04:00 • committed by GitHub
parent 90a06c0250
commit 028e2e14f8
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 8 additions and 8 deletions

View file

@ -20,7 +20,7 @@ permissions:
jobs:
dotnet:
name: .NET Build & Test
uses: Sea-Haven-Industries/.github/.github/workflows/ci-dotnet.yaml@main
uses: Sea-Haven-Industries/.github/.github/workflows/ci-dotnet.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
with:
working-directory: api
solution: ProposalSystem.sln
@ -30,7 +30,7 @@ jobs:
# Phase 5: full frontend pipeline — format:check, build (tsc -b included),
# vitest, Playwright chromium smoke. Replaces the old typecheck-only job
# plus the standalone Web Tests job. No lint script yet (run-lint: false).
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-frontend.yaml@main
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-frontend.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
with:
working-directory: web
cache-dependency-path: web/package-lock.json
@ -40,7 +40,7 @@ jobs:
python:
name: Python Lint
uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@main
uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
with:
source-dirs: "lambdas/"
run-sam-validate: false
@ -68,7 +68,7 @@ jobs:
mobile:
name: Mobile Typecheck
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@main
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
with:
working-directory: mobile
cache-dependency-path: mobile/package-lock.json
@ -78,7 +78,7 @@ jobs:
infra:
name: CDK Synth
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@main
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
with:
working-directory: infra
cache-dependency-path: infra/package-lock.json

View file

@ -15,7 +15,7 @@ permissions:
jobs:
deploy-ios:
name: Build & Upload to TestFlight
uses: Sea-Haven-Industries/.github/.github/workflows/cd-mobile-ios.yaml@main
uses: Sea-Haven-Industries/.github/.github/workflows/cd-mobile-ios.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
with:
working-directory: mobile
cache-dependency-path: mobile/package-lock.json

View file

@ -15,7 +15,7 @@ permissions:
jobs:
deploy:
name: Deploy to AWS
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@main
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
with:
cdk-dir: infra
dotnet-version: "8.0.x"

View file

@ -8,4 +8,4 @@ permissions:
issues: write
jobs:
label:
uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@main
uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main