Skip to content

fix(ci): repin Security Scan to the panic-attack workflow that builds the scanner #491

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
hyperpolymath merged 2 commits into from
Nov 10, 2026
+1 −1
Merged

fix(ci): repin Security Scan to the panic-attack workflow that builds the scanner #491

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
4672e1d
fix(ci): repin Security Scan to the panic-attack workflow that builds…
claude Nov 10, 2026
bf00d05
Merge branch 'main' into marina/optimistic-cray-js64k7
hyperpolymath Nov 10, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/security-scan.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,6 @@ permissions:

jobs:
scan:
uses: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@be6ac46716eaf049570ec4966f4ae4699b319689 # main 2026-10-20: dtolnay/rust-toolchain v1 at 683b588 (the b689a74 pin was a commit no tag names any more)
uses: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@55ffcc9a240e937edd968487af15ab45c6f0522f # main 2026-11-10: builds the scanner at the workflow commit, not the caller (panic-attack#276)

@chatgpt-codex-connector chatgpt-codex-connector Bot Nov 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Refresh actions.lock with the workflow pin

The target tree still maps .github/workflows/security-scan.yml to hyperpolymath/panic-attack@be6ac467... in .github/workflows/actions.lock (lines 86–87), while this line now uses 55ffcc9.... The repository's canonical governance lockfile verification checks managed reusable workflows against that index, so this commit makes the Actions lockfile check fail until the generated lock update is committed alongside the pin.

Useful? React with 👍 / 👎.

secrets:
VERISIMDB_PAT: ${{ secrets.VERISIMDB_PAT }}
Loading