Skip to content

chore(security): run scheduled security scans at 2 AM Pacific - #14

Merged
joeblau merged 1 commit into
mainfrom
chore/security-scans-2am
Oct 28, 2026
Merged

joeblau merged 1 commit into
mainfrom
chore/security-scans-2am

Conversation

@joeblau

@joeblau joeblau commented Oct 28, 2026 •

Copy link
Copy Markdown
Contributor

Moves this repo's scheduled security scans to the 2 AM Pacific window.

Uses the timezone: "America/Los_Angeles" key on on.schedule (GitHub Actions, Mar 2026), so the cron is now written in Pacific time and stays at 2 AM through DST changes (Nov 1). Repos are staggered ~3 minutes apart (nightlies 2:00–2:42 AM, Saturday Semgrep 2:45–3:18 AM after that day's nightlies) so the minis aren't hit all at once.

Workflow Old New
Nightly scan (Mon–Sat incremental; Sun full-history secrets) 6:38 AM PDT / 13:38 UTC 2:39 AM America/Los_Angeles (= 09:39 UTC under PDT, 10:39 UTC under PST)
  • Mon–Sat / Sunday split is unchanged; the github.event.schedule comparison that selects full-history secrets on Sunday was updated to the new Sunday cron string.
  • No runner, job, or scan-config changes. actionlint passes.

@joeblau
joeblau merged commit 4990598 into main Oct 28, 2026
7 checks passed
@joeblau
joeblau deleted the chore/security-scans-2am branch October 28, 2026 03:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant