4 commits

Author	SHA1	Message	Date
Adam Moussa	bd3cf99147	fix: add permissions block for dependency-review workflow ... Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>	2026-09-03 10:03:19 -04:00
Adam Moussa	fa9bda7554	feat(deploy): move dev application CD through Terraform ... GitHub creates the immutable Elastic Beanstalk version; HCP Terraform is the only UpdateEnvironment caller via a guarded version_label run.	2026-09-03 10:03:19 -04:00
Alexandre Brandizzi	73b525a685	ci: document CDK advisory exception	2026-07-27 19:29:37 -03:00
Adam Moussa	3a61885c71	Add dependency-review caller workflow (#3) ... * Add dependency-review caller workflow Add a pull_request-triggered caller that invokes the org-level callable-dependency-review workflow to scan dependency changes and fail on high-severity advisories. * chore: retrigger checks * chore: retrigger dep review (post-fix)	2026-06-05 12:27:11 -04:00