Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/public-pii-gate-caller.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -10,5 +10,5 @@ on:

jobs:
pii-gate:
uses: tracebloc/.github/.github/workflows/public-pii-gate.yml@main
uses: tracebloc/.github/.github/workflows/public-pii-gate.yml@fix/pii-gate-token-perms

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Caller pins unstable workflow ref

High Severity

The reusable workflow uses ref was changed from @main to @fix/pii-gate-token-perms, while the new smoke doc and PR goal say the check validates resolution from @main. Every other caller workflow in this repo pins @main. Merging this leaves the Public PII gate on a short-lived branch ref that can break all PR checks when that branch is removed.

Additional Locations (1)
Fix in CursorFix in Web

Reviewed by Cursor Bugbot for commit b27747b. Configure here.

secrets: inherit
6 changes: 6 additions & 0 deletions PII_GATE_SMOKE.md
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
# PII gate smoke check

Verifies the public-pii-gate reusable workflow resolves from @main after publishing.
Safe to delete. Tracking: tracebloc/.github#62

(synchronize trigger to force a fresh gate run post-publish)
Loading