Skip to content

fix(ci): update reusable workflow SHAs to @7fdc2705df74b4e352d2a1cde3e87a5923fdf329 - #70

Closed
hyperpolymath wants to merge 9 commits into
mainfrom
fix/ci-426-batch13
Closed

fix(ci): update reusable workflow SHAs to @7fdc2705df74b4e352d2a1cde3e87a5923fdf329#70
hyperpolymath wants to merge 9 commits into
mainfrom
fix/ci-426-batch13

Conversation

@hyperpolymath

@hyperpolymathhyperpolymath commented Aug 13, 2026

Copy link
Copy Markdown
Owner

Part of estate-wide standards#426 remediation - Batch 13 SHA update to fix Bug B (permission escalation) in reusable workflows.


Summary by Gitar

  • CI workflows:
    • Updated reusable workflow SHAs to @7fdc2705df74b4e352d2a1cde3e87a5923fdf329 across multiple workflow files
    • Added explicit actions: read permissions blocks to GitHub Actions workflows
    • Added new central estate audit workflow and updated CodeQL action SHAs
  • Project metadata:
    • Updated guix.scm package definition for squisher-corpus with license and metadata changes

This will update automatically on new commits.

hyperpolymathand others added 7 commits July 26, 2026 14:50
…e87a5923fdf329
Part of estate-wide standards#426 remediation - Batch 11 SHA update.
Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
…e87a5923fdf329
Part of estate-wide standards#426 remediation - Batch 12 SHA update.
Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
…e87a5923fdf329
Part of estate-wide standards#426 remediation - Batch 13 SHA update.
Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
@hyperpolymath
hyperpolymath enabled auto-merge (squash) August 13, 2026 04:15
@gitar-bot

gitar-botBot commented Aug 13, 2026

Copy link
Copy Markdown

Important

You are using the Gitar free plan. Upgrade to unlock code review, CI analysis, auto-apply, custom automations, and more.

Gitar

@sonarqubecloud

Copy link
Copy Markdown

auto-merge was automatically disabled August 13, 2026 21:59

Pull request was closed

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@hyperpolymath