adam/proposal-system
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/proposal-system.git synced 2026-09-30 05:23:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore(ci): track .github reusable workflows on @main (#173)

Browse source 
Switches all reusable-workflow references from the frozen SHA
c040bfaa (INF-M8 supply-chain pin) to @main, matching every other repo
in the org. This lets proposal-system pick up the actions/checkout v6->v7
bump (and future reusable-workflow changes) automatically instead of
staying frozen on the pre-bump commit.

Note: this intentionally reverses the INF-M8 SHA-pin hardening for
consistency with the rest of the org's @main convention.
This commit is contained in:
Adam Moussa 2026-06-25 11:55:29 -04:00 • committed by GitHub
parent 86c3dd6db9
commit 63422608c7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 7 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
.github/workflows/ci.yaml vendored
View file

@ -20,16 +20,14 @@ permissions:
jobs:
dotnet:
name: .NET Build & Test
# Fix: INF-M8 — pin to SHA for supply chain security (ci-dotnet.yaml@main)
uses: Sea-Haven-Industries/.github/.github/workflows/ci-dotnet.yaml@c040bfaa223ac9a671cca9047cffdac45b00f3dc
uses: Sea-Haven-Industries/.github/.github/workflows/ci-dotnet.yaml@main
with:
working-directory: api
solution: ProposalSystem.sln
web:
name: Web Frontend Check
# Fix: INF-M8 — pin to SHA for supply chain security (ci-typescript-cdk.yaml@main)
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@c040bfaa223ac9a671cca9047cffdac45b00f3dc
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@main
with:
working-directory: web
cache-dependency-path: web/package-lock.json
@ -56,8 +54,7 @@ jobs:
python:
name: Python Lint
# Fix: INF-M8 — pin to SHA for supply chain security (ci-python-sam.yaml@main)
uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@c040bfaa223ac9a671cca9047cffdac45b00f3dc
uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@main
with:
source-dirs: "lambdas/"
run-sam-validate: false
@ -85,8 +82,7 @@ jobs:
mobile:
name: Mobile Typecheck
# Fix: INF-M8 — pin to SHA for supply chain security (ci-typescript-cdk.yaml@main)
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@c040bfaa223ac9a671cca9047cffdac45b00f3dc
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@main
with:
working-directory: mobile
cache-dependency-path: mobile/package-lock.json
@ -96,8 +92,7 @@ jobs:
infra:
name: CDK Synth
# Fix: INF-M8 — pin to SHA for supply chain security (ci-typescript-cdk.yaml@main)
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@c040bfaa223ac9a671cca9047cffdac45b00f3dc
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@main
with:
working-directory: infra
cache-dependency-path: infra/package-lock.json

3
.github/workflows/deploy-mobile.yaml vendored
View file

@ -15,8 +15,7 @@ permissions:
jobs:
deploy-ios:
name: Build & Upload to TestFlight
# Fix: INF-M8 — pin to SHA for supply chain security (cd-mobile-ios.yaml@main)
uses: Sea-Haven-Industries/.github/.github/workflows/cd-mobile-ios.yaml@c040bfaa223ac9a671cca9047cffdac45b00f3dc
uses: Sea-Haven-Industries/.github/.github/workflows/cd-mobile-ios.yaml@main
with:
working-directory: mobile
cache-dependency-path: mobile/package-lock.json

3
.github/workflows/deploy.yaml vendored
View file

@ -15,8 +15,7 @@ permissions:
jobs:
deploy:
name: Deploy to AWS
# Fix: INF-M8 — pin to SHA for supply chain security (cd-cdk.yaml@main)
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@c040bfaa223ac9a671cca9047cffdac45b00f3dc
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@main
with:
cdk-dir: infra
dotnet-version: "8.0.x"