Skip to content

Commit d7c3b8f

Browse files
ci: bump canonical wrapper SHA pins to current main HEAD (mirror/scorecard/secret-scanner) (#335)
## Summary The canonical wrappers in this repo (\`scorecard.yml\`, \`mirror.yml\`, \`secret-scanner.yml\`) self-pinned the **birth SHA** of each reusable from 2026-05-26, even after meaningful reusable updates landed: - **mirror-reusable**: #305 added the Radicle secret-presence gate (\`af5cd0cabd\`) that fixes 26 repos' \`mirror-radicle\` red (e.g. ephapax#268). The canonical was still demonstrating a pre-gate pin, so downstream wrappers that mirror this pin couldn't pick up the fix. - **scorecard-reusable**: #230 aligned canonical cron + #249 SPDX migration (\`e03686486e\`). Cosmetic, but unblocks the canonical demonstrating current shape. - **secret-scanner-reusable**: #236 pragma-honoring fix (\`28fdf197\`) + #249 SPDX. Bumps all 3 to standards@main HEAD \`3f34549c\` so the canonical example reflects the current reusable shape that downstream wrappers should converge to. ## Fan-out implication Downstream wrappers currently pinning the 2026-05-26 birth SHAs can now mechanically refresh their pins to match. Worth its own follow-up campaign; this PR is the prerequisite (canonical-first). ## Test plan - [x] All 3 SHAs resolve to existing commits in this repo - [ ] standards' own scorecard / mirror / secret-scanner runs on PR + post-merge Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
1 parent d73c93e commit d7c3b8f

3 files changed

Lines changed: 3 additions & 3 deletions

File tree

.github/workflows/mirror.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,5 +11,5 @@ permissions:
1111

1212
jobs:
1313
mirror:
14-
uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@e6b2884722350515934d443daf23442f2195796f
14+
uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@3f34549c03274ec7a74683068f03a492b0fa805f
1515
secrets: inherit

.github/workflows/scorecard.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,5 +15,5 @@ jobs:
1515
permissions:
1616
security-events: write
1717
id-token: write
18-
uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@e0caf11508a3989574713c78f5f444f2ce5e33ef
18+
uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@3f34549c03274ec7a74683068f03a492b0fa805f
1919
secrets: inherit

.github/workflows/secret-scanner.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,5 +15,5 @@ permissions:
1515

1616
jobs:
1717
scan:
18-
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@3e4bd4c93911750727e2e4c66dff859e00079da0
18+
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@3f34549c03274ec7a74683068f03a492b0fa805f
1919
secrets: inherit

0 commit comments

Comments
 (0)