ci: fix CI/CD configuration (campaigns C001-C005)

hyperpolymath · hyperpolymath · commit ecca0a86b320 · 2026-06-01T01:09:11.000+01:00
- C001: CodeQL language fixes
- C002: License identifier standardization
- C003: Outdated actions audit
- C004: Pin standards refs to SHA 861b5e9
- C005: Add workflow-level permissions
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -1,4 +1,4 @@
-# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-License-Identifier: MPL-2.0-or-later
 name: CodeQL Security Analysis
 
 on:
diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
@@ -23,4 +23,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@861b5e911d9e5dcfb3c0ab3dd2a9a3c8fd0a1613

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-# SPDX-License-Identifier: PMPL-1.0-or-later`
	`1`	`+# SPDX-License-Identifier: MPL-2.0-or-later`
`2`	`2`	`name: CodeQL Security Analysis`
`3`	`3`
`4`	`4`	`on:`