From 8be015db8cba4de861d73489c9c9a099c905f077 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Fri, 2 Oct 2026 02:12:14 +0100 Subject: [PATCH] chore(ci): re-point standards reusable-workflow pins to 11ba299dca22 Opened by the standards pin applier (scripts/apply-workflow-pins-remote.sh). Re-points this repository's pinned references to hyperpolymath/standards reusable workflows at 11ba299dca221b6d4e970eeb58dd17ccbb825a9a, which is proven reachable from standards main. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01HfgwLCdKNd5iZVo6VTiSim --- .github/workflows/governance.yml | 2 +- .github/workflows/hypatia-scan.yml | 2 +- .github/workflows/mirror.yml | 2 +- .github/workflows/scorecard.yml | 2 +- .github/workflows/secret-scanner.yml | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index 0fc2e60..1da2748 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -19,4 +19,4 @@ permissions: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@8f31a5a4ba591d544b65f91f6d78b136e07756f0 + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@11ba299dca221b6d4e970eeb58dd17ccbb825a9a diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index b6c8083..1c6e9a8 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -25,4 +25,4 @@ permissions: security-events: write jobs: scan: - uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@cc58c0cb23f73fc2019ce85a56a468e5248a93b3 + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@11ba299dca221b6d4e970eeb58dd17ccbb825a9a diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml index ca494b2..9178a3d 100644 --- a/.github/workflows/mirror.yml +++ b/.github/workflows/mirror.yml @@ -14,5 +14,5 @@ permissions: contents: read jobs: mirror: - uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236 + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@11ba299dca221b6d4e970eeb58dd17ccbb825a9a secrets: inherit diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 4f2f9c5..92c87a8 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -14,7 +14,7 @@ permissions: contents: read jobs: scorecard: - uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@8750b94ac1bbe8c51ad13fe106669b13478f0b62 + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@11ba299dca221b6d4e970eeb58dd17ccbb825a9a # Reusable called-workflow permissions are CAPPED by the caller's grants; # without security-events: write here the scorecard SARIF upload fails with # startup_failure (hypatia WF018). id-token: write enables OIDC publish. diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml index aa27b3c..d98e2b5 100644 --- a/.github/workflows/secret-scanner.yml +++ b/.github/workflows/secret-scanner.yml @@ -24,5 +24,5 @@ jobs: # caller must grant at least that or the run startup-fails. permissions: contents: read - uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@c65436ee3351cd6b0fa14b142938b195efc77586 + uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@11ba299dca221b6d4e970eeb58dd17ccbb825a9a secrets: inherit