diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index dbea013..5711340 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -1,5 +1,4 @@ name: CI - on: pull_request: branches: [main] @@ -9,7 +8,7 @@ permissions: jobs: ci: - uses: Sea-Haven-Industries/.github/.github/workflows/ci-static.yaml@fd60e4c9041784f666ac0fdefb9bec3c7fbf5143 # main + uses: Sea-Haven-Industries/.github/.github/workflows/ci-static.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2 with: build-command: "npx @11ty/eleventy" check-dir: "_site" diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 2438cb7..94f2a05 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -1,5 +1,4 @@ name: Dependency Review - on: pull_request: @@ -8,7 +7,7 @@ permissions: jobs: review: - uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@07ce007bad08fdcf07409a5f372baabda8781354 # main + uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2 with: # brace-expansion OOM DoS: no in-range fix (patch only in 5.0.8; @11ty/recursive-copy # pins minimatch <10.0.3). Build-time-only exposure, adjudicated in diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 46b1dc8..daa7bf9 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -2,10 +2,12 @@ name: Labeler on: pull_request: branches: [main] + permissions: contents: read pull-requests: write issues: write + jobs: label: - uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@fd60e4c9041784f666ac0fdefb9bec3c7fbf5143 # main + uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2