Skip to content

feat: implement issue #325 — Compliance: non-stub-dependency-audit.yml #340

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
don-petry wants to merge 2 commits into from
Closed

feat: implement issue #325 — Compliance: non-stub-dependency-audit.yml #340

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
8a267d9
feat: implement issue #325 — Compliance: non-stub-dependency-audit.yml
donpetry-bot May 26, 2026
87bc09a
chore(ci): apply prettier/eslint auto-fixes
github-actions[bot] May 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .github/workflows/ci-failure-analyst.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,21 +18,21 @@
# Docs: https://github.com/petry-projects/.github-private/blob/main/docs/aw/ci-failure-analyst.md
# ─────────────────────────────────────────────────────────────────────────────

name: "CI Failure Analyst"
name: 'CI Failure Analyst'

on:
check_run:
types: [completed]

permissions:
pull-requests: write
issues: write # post/read PR comments via the Issues comments API
issues: write # post/read PR comments via the Issues comments API
actions: read
contents: read
checks: read

concurrency:
group: "ci-failure-analyst-${{ github.event.check_run.head_sha }}"
group: 'ci-failure-analyst-${{ github.event.check_run.head_sha }}'
cancel-in-progress: false

jobs:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/dependency-audit.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,4 +30,4 @@ permissions:

jobs:
dependency-audit:
uses: petry-projects/.github/.github/workflows/dependency-audit-reusable.yml@v2
uses: petry-projects/.github/.github/workflows/dependency-audit-reusable.yml@v1

@chatgpt-codex-connector chatgpt-codex-connector Bot May 26, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Restore dependency audit reusable workflow to v2

Pinning dependency-audit back to @v1 regresses the repository to an older security-audit implementation and undoes the prior upgrade to @v2, so future PRs/pushes will run stale dependency-audit logic. In this repo, this file is a thin caller and explicitly treated as a source-of-truth stub, so changing the uses: target version here introduces compliance drift rather than a functional update.

Useful? React with 👍 / 👎.

1 change: 1 addition & 0 deletions .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,3 +10,4 @@ playwright-report/
# compliance-ci-trigger
# ci-trigger-298
.dev-lead/
.dev-lead/

@gemini-code-assist gemini-code-assist Bot May 26, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

low

The entry .dev-lead/ is already present in this file (on line 12). This duplicate entry is redundant and can be safely removed.

Loading