From b99c240309dac16508ebfbc689c5605168d2fe09 Mon Sep 17 00:00:00 2001 From: Joe Blau Date: Mon, 26 Oct 2026 11:38:34 -0700 Subject: [PATCH] ci(security): pin reusable security workflows to v1.0.1 (bloxwap/.github#8) v1 exited on any scanner finding under bash -e before the CVSS/fix gate ran. Signed-off-by: Joe Blau --- .github/workflows/security-nightly.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security-nightly.yml b/.github/workflows/security-nightly.yml index 559a4af..024a00a 100644 --- a/.github/workflows/security-nightly.yml +++ b/.github/workflows/security-nightly.yml @@ -29,7 +29,7 @@ jobs: scan: # Fork guard: never run fork PR code on self-hosted minis if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: bloxwap/.github/.github/workflows/security-scan.yml@90c5e7f20cef611a83ea7db51f9b85478d714fa6 # v1 + uses: bloxwap/.github/.github/workflows/security-scan.yml@0387d86d796b5a80509a9862b35991a160ff13b4 # v1.0.1 permissions: contents: read with: