From a74d0379d61b3b689d208a9eadacb6a00c32508c Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Sat, 27 Jun 2026 16:43:39 +0100 Subject: [PATCH 1/2] ci: re-pin governance reusable to standards HEAD d7c2271 (hypatia#464) --- .github/workflows/governance.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index f4b6c85..5ac974a 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -34,4 +34,4 @@ jobs: # matches the sibling repos' pin (e.g. ochrance-framework). Bump # deliberately, never float: an unpinned reusable workflow is an # unpinned trust boundary. mirror.yml / scorecard.yml already pin. - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236 + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e \ No newline at end of file From 50d79fdc53c11991e6bd46f1e2028d318d00b80a Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Sat, 27 Jun 2026 16:43:41 +0100 Subject: [PATCH 2/2] ci: re-pin scorecard reusable to standards HEAD d7c2271 (hypatia#464) --- .github/workflows/scorecard.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 12d2daa..9be1957 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -21,6 +21,6 @@ jobs: contents: read security-events: write id-token: write - uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236 + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e timeout-minutes: 10 - secrets: inherit + secrets: inherit \ No newline at end of file