Adam Moussa
6f0f3032fb
chore(ci): remove pr policy workflow caller ( #21 )
2026-08-24 15:12:48 -04:00
Adam Moussa
d310d66a31
chore(ci): switch auto-merge from seahaven-bot to Mergify ( #20 )
2026-08-24 13:53:07 -04:00
Adam Moussa
7a00997425
ci: enable squash auto-merge on ready PRs (PLAT-108) ( #17 )
...
* ci: enable squash auto-merge on ready PRs
* fix(ci): serialize auto-merge enable and ignore already-enabled
2026-08-21 23:34:42 +00:00
Adam Moussa
932e61db69
ci: add merge_group trigger for required ci / ci ( #16 )
2026-08-21 17:42:39 -04:00
dependabot[bot]
e5ed7acfb7
chore(deps): bump the minor-and-patch group with 4 updates ( #15 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](7ac3528750...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](7ac3528750...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](7ac3528750...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](7ac3528750...e5691d8a7f
2026-08-17 15:16:02 -04:00
dependabot[bot]
1ec6ac61c0
chore(deps): bump the minor-and-patch group with 4 updates ( #14 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml` from 1.0.3 to 1.0.6
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...7ac3528750https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...7ac3528750https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...7ac3528750https://github.com/sea-haven-industries/.github/releases )
- [Commits](9c1ecf9428...7ac3528750
2026-08-10 17:48:22 -04:00
Adam Moussa
51f7905cc7
ci: add org PR policy caller ( #10 )
...
Refs: PLAT-62
2026-08-04 11:56:37 -04:00
dependabot[bot]
a82092f4ca
Merge pull request #8 from Sea-Haven-Industries/dependabot/github_actions/minor-and-patch-3e1a0502ab
...
chore(deps): bump the minor-and-patch group with 3 updates
2026-08-03 13:00:15 -04:00
Adam Moussa
8cad01cf45
style(ci): normalize workflow block spacing
2026-07-28 18:07:56 -04:00
Adam Moussa
db4a98eb62
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 17:58:08 -04:00
da26a388fe
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50)
2026-07-06 18:08:16 -04:00
4c88c01f7b
chore: import security-review gate, sweep, and Plane-1 checkers into standalone repo
...
Fresh-init copy of the security-review/ subsystem extracted from
Sea-Haven-Industries/orchestrator (being deprecated). Adds org-standard scaffold:
CI reusable-workflow callers (ruff + collect), dependency-review, labeler,
dependabot, .gitignore, requirements.txt. Scheduled execution is migrating to
Claude Code web routines (ALARM-only to #repo-scanner); the systemd units and
nightly_sweep.sh/checker_coordinator.sh remain the source of truth.
Committed with --no-verify: the canary fixtures (checkers/fixtures/**) carry
intentional secret-shaped test data that trips the deterministic gate (the
documented detector-fixture false positive); no new logic is introduced.
2026-06-29 11:41:41 -04:00
