ci: fix CI/CD configuration (campaigns C001-C005)

hyperpolymath · hyperpolymath · commit 6b5a499e2911 · 2026-06-01T03:22:12.000+01:00
diff --git a/journal-theme/.github/workflows/codeql.yml b/journal-theme/.github/workflows/codeql.yml
@@ -20,6 +20,8 @@ on:
   schedule:
     - cron: '38 23 * * 5'
 
+permissions: read-all
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
diff --git a/journal-theme/.github/workflows/governance.yml b/journal-theme/.github/workflows/governance.yml
@@ -23,4 +23,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@861b5e911d9e5dcfb3c0ab3dd2a9a3c8fd0a1613
diff --git a/plugin-conflict-mapper/.github/workflows/codeql.yml b/plugin-conflict-mapper/.github/workflows/codeql.yml
@@ -20,6 +20,8 @@ on:
   schedule:
     - cron: '34 1 * * 3'
 
+permissions: read-all
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
diff --git a/plugin-conflict-mapper/.github/workflows/governance.yml b/plugin-conflict-mapper/.github/workflows/governance.yml
@@ -23,4 +23,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@861b5e911d9e5dcfb3c0ab3dd2a9a3c8fd0a1613
diff --git a/praxis/.github/workflows/codeql.yml b/praxis/.github/workflows/codeql.yml
@@ -20,6 +20,8 @@ on:
   schedule:
     - cron: '37 23 * * 2'
 
+permissions: read-all
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
diff --git a/praxis/.github/workflows/governance.yml b/praxis/.github/workflows/governance.yml
@@ -23,4 +23,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@861b5e911d9e5dcfb3c0ab3dd2a9a3c8fd0a1613
diff --git a/project-wharf/.github/workflows/codeql.yml b/project-wharf/.github/workflows/codeql.yml
@@ -10,6 +10,7 @@ on:
   schedule:
     - cron: '17 23 * * 3'
 
+
 permissions: read-all
 
 jobs:
diff --git a/project-wharf/.github/workflows/governance.yml b/project-wharf/.github/workflows/governance.yml
@@ -23,4 +23,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@861b5e911d9e5dcfb3c0ab3dd2a9a3c8fd0a1613
diff --git a/resurrect/.github/workflows/codeql.yml b/resurrect/.github/workflows/codeql.yml
@@ -20,6 +20,8 @@ on:
   schedule:
     - cron: '16 7 * * 1'
 
+permissions: read-all
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
diff --git a/resurrect/.github/workflows/governance.yml b/resurrect/.github/workflows/governance.yml
@@ -23,4 +23,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@861b5e911d9e5dcfb3c0ab3dd2a9a3c8fd0a1613
diff --git a/secured/.github/workflows/codeql.yml b/secured/.github/workflows/codeql.yml
@@ -9,6 +9,7 @@ on:
   schedule:
     - cron: '0 6 * * 1'
 
+
 permissions: read-all
 
 jobs:
diff --git a/secured/.github/workflows/governance.yml b/secured/.github/workflows/governance.yml
@@ -23,4 +23,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@861b5e911d9e5dcfb3c0ab3dd2a9a3c8fd0a1613
diff --git a/secured/php-aegis/.github/workflows/codeql.yml b/secured/php-aegis/.github/workflows/codeql.yml
@@ -9,6 +9,7 @@ on:
   schedule:
     - cron: '0 6 * * 1'
 
+
 permissions: read-all
 
 jobs:
diff --git a/secured/php-aegis/.github/workflows/governance.yml b/secured/php-aegis/.github/workflows/governance.yml
@@ -23,4 +23,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@861b5e911d9e5dcfb3c0ab3dd2a9a3c8fd0a1613
diff --git a/sinople-theme/.github/workflows/codeql.yml b/sinople-theme/.github/workflows/codeql.yml
@@ -20,6 +20,8 @@ on:
   schedule:
     - cron: '42 17 * * 6'
 
+permissions: read-all
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
diff --git a/sinople-theme/.github/workflows/governance.yml b/sinople-theme/.github/workflows/governance.yml
@@ -23,4 +23,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@861b5e911d9e5dcfb3c0ab3dd2a9a3c8fd0a1613
