From 1bfd71670a4e521d78b5e96e7a7edab515a78a80 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 14:12:12 +0000 Subject: [PATCH] chore(deps): bump attested-delivery/.github/.github/workflows/reusable-scorecard.yml Bumps [attested-delivery/.github/.github/workflows/reusable-scorecard.yml](https://github.com/attested-delivery/.github) from ca91728c87beb08742325b4ed4d06fcfb261435b to 78f1933ef020e3d94af848a191297d26e8dc8b4c. - [Release notes](https://github.com/attested-delivery/.github/releases) - [Commits](https://github.com/attested-delivery/.github/compare/ca91728c87beb08742325b4ed4d06fcfb261435b...78f1933ef020e3d94af848a191297d26e8dc8b4c) --- updated-dependencies: - dependency-name: attested-delivery/.github/.github/workflows/reusable-scorecard.yml dependency-version: 78f1933ef020e3d94af848a191297d26e8dc8b4c dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/quality-gates.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/quality-gates.yml b/.github/workflows/quality-gates.yml index ea95b84..9f867dd 100644 --- a/.github/workflows/quality-gates.yml +++ b/.github/workflows/quality-gates.yml @@ -71,7 +71,7 @@ jobs: contents: read actions: read # attested-delivery/.github main @ ca91728 (2026-07-12) - uses: attested-delivery/.github/.github/workflows/reusable-scorecard.yml@ca91728c87beb08742325b4ed4d06fcfb261435b + uses: attested-delivery/.github/.github/workflows/reusable-scorecard.yml@78f1933ef020e3d94af848a191297d26e8dc8b4c # IaC + license — Trivy filesystem scan. No image-ref yet: go-htmx has no # Dockerfile/container pipeline at this stage.