From 80fce6e77b9ece891e69de2b46a7eaf7cc602eda Mon Sep 17 00:00:00 2001 From: Rob Bos Date: Wed, 1 Jul 2026 21:52:10 +0200 Subject: [PATCH 1/2] chore: bump secure-inputs reusable workflow pin Bumps the pinned SHA for devops-actions/.github's secure-inputs.yml reusable workflow to latest main, which now pins secure-action-inputs to a tagged v1.0.0 SHA instead of a floating @main ref (devops-actions/.github#323). Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/workflows/secure-inputs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/secure-inputs.yml b/.github/workflows/secure-inputs.yml index 1eb022d..e2352b2 100644 --- a/.github/workflows/secure-inputs.yml +++ b/.github/workflows/secure-inputs.yml @@ -21,6 +21,6 @@ permissions: jobs: scan-inputs: - uses: devops-actions/.github/.github/workflows/secure-inputs.yml@b77cea6d7ba1cd4e001581783cc592bbb63ce46d # main + uses: devops-actions/.github/.github/workflows/secure-inputs.yml@3bb5c8505eb368f90cf87956f0cc4d84cb8554d1 # main permissions: contents: read From c1ed0457d44a6eec1f82f398396640928907b412 Mon Sep 17 00:00:00 2001 From: Rob Bos Date: Wed, 1 Jul 2026 21:59:49 +0200 Subject: [PATCH 2/2] chore: update version comment to v1.1.0 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/workflows/secure-inputs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/secure-inputs.yml b/.github/workflows/secure-inputs.yml index e2352b2..74b2d15 100644 --- a/.github/workflows/secure-inputs.yml +++ b/.github/workflows/secure-inputs.yml @@ -21,6 +21,6 @@ permissions: jobs: scan-inputs: - uses: devops-actions/.github/.github/workflows/secure-inputs.yml@3bb5c8505eb368f90cf87956f0cc4d84cb8554d1 # main + uses: devops-actions/.github/.github/workflows/secure-inputs.yml@3bb5c8505eb368f90cf87956f0cc4d84cb8554d1 # v1.1.0 permissions: contents: read