From 72b89746da530aa356ba7f6097d8b75ce0fceea2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 4 Oct 2026 15:16:29 +0000 Subject: [PATCH] chore(ci): bump huntridge-labs/argus/.github/workflows/reusable-security-hardening.yml Bumps [huntridge-labs/argus/.github/workflows/reusable-security-hardening.yml](https://github.com/huntridge-labs/argus) from 1.12.6 to 1.12.7. - [Release notes](https://github.com/huntridge-labs/argus/releases) - [Changelog](https://github.com/huntridge-labs/argus/blob/main/CHANGELOG.md) - [Commits](https://github.com/huntridge-labs/argus/compare/3fb133a5d03ec81a7a534cf451dd19991e04a975...309e971918f9852c4a35e34fa145b5412697829f) --- updated-dependencies: - dependency-name: huntridge-labs/argus/.github/workflows/reusable-security-hardening.yml dependency-version: 1.12.7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/security-hardening.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security-hardening.yml b/.github/workflows/security-hardening.yml index 52d4646..7261307 100644 --- a/.github/workflows/security-hardening.yml +++ b/.github/workflows/security-hardening.yml @@ -22,7 +22,7 @@ jobs: # SHA-pinned rather than tag-pinned for supply-chain safety: a tag can be moved, a commit cannot. # Dependabot bumps this SHA and names the tag it resolves to in the PR title, so read the version there # rather than trusting a hand-written one here (this comment claimed v1.11.0 through three bumps past it). - uses: huntridge-labs/argus/.github/workflows/reusable-security-hardening.yml@3fb133a5d03ec81a7a534cf451dd19991e04a975 + uses: huntridge-labs/argus/.github/workflows/reusable-security-hardening.yml@309e971918f9852c4a35e34fa145b5412697829f with: scanners: codeql,gitleaks,osv,dependency-review enable_code_security: true