Compare commits

..

5 commits

Author SHA1 Message Date
Adam Moussa
ed0f6b122a
Merge pull request #5 from Sea-Haven-Industries/fix/audit-hygiene
Some checks failed
Deploy / deploy (push) Has been cancelled
ci: add dependabot, labeler, and dependency-review workflows
2026-07-28 18:40:35 -04:00
Adam Moussa
615abc30f1 ci: add dependabot, labeler, and dependency-review workflows 2026-07-28 18:37:24 -04:00
Adam Moussa
88f38829c7
Merge pull request #4 from Sea-Haven-Industries/ci/pin-reusables-v1.0.2
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 18:14:33 -04:00
Adam Moussa
41a87fd701 ci: declare workflow permissions and normalize block spacing 2026-07-28 18:08:01 -04:00
Adam Moussa
261ceafc2a ci(deps): pin org reusable workflows to v1.0.2 2026-07-28 17:58:15 -04:00
5 changed files with 39 additions and 2 deletions

11
.github/dependabot.yml vendored Normal file
View file

@ -0,0 +1,11 @@
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
groups:
minor-and-patch:
update-types:
- "minor"
- "patch"

View file

@ -3,8 +3,11 @@ on:
pull_request:
branches: [main]
permissions:
contents: read
jobs:
ci:
# No Python source in this repo — ruff no-ops on an empty file set and the
# reusable workflow still runs `sam validate --lint` on template.yaml.
uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@fd60e4c9041784f666ac0fdefb9bec3c7fbf5143 # main
uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2

10
.github/workflows/dependency-review.yml vendored Normal file
View file

@ -0,0 +1,10 @@
name: Dependency Review
on:
pull_request:
permissions:
contents: read
jobs:
review:
uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2

View file

@ -13,7 +13,7 @@ concurrency:
jobs:
deploy:
uses: Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml@fd60e4c9041784f666ac0fdefb9bec3c7fbf5143 # main
uses: Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2
with:
stack-name: sh-openswe-traces
cfn-role-arn: arn:aws:iam::328440206208:role/sh-openswe-traces-cfn-exec-role

13
.github/workflows/labeler.yml vendored Normal file
View file

@ -0,0 +1,13 @@
name: Labeler
on:
pull_request:
branches: [main]
permissions:
contents: read
pull-requests: write
issues: write
jobs:
label:
uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2