diff --git a/1-formats/a2ml/meta/.github/workflows/codeql.yml b/1-formats/a2ml/meta/.github/workflows/codeql.yml index 261b34bb2..e6bdb0e71 100644 --- a/1-formats/a2ml/meta/.github/workflows/codeql.yml +++ b/1-formats/a2ml/meta/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/1-formats/a2ml/meta/.github/workflows/governance.yml b/1-formats/a2ml/meta/.github/workflows/governance.yml index 64ce492be..bd68b4c8a 100644 --- a/1-formats/a2ml/meta/.github/workflows/governance.yml +++ b/1-formats/a2ml/meta/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/1-formats/a2ml/meta/.github/workflows/hypatia-scan.yml b/1-formats/a2ml/meta/.github/workflows/hypatia-scan.yml index 4bc2b3815..fbd881243 100644 --- a/1-formats/a2ml/meta/.github/workflows/hypatia-scan.yml +++ b/1-formats/a2ml/meta/.github/workflows/hypatia-scan.yml @@ -17,5 +17,9 @@ permissions: jobs: scan: - uses: ../../.github/workflows/hypatia-scan-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/1-formats/a2ml/meta/.github/workflows/mirror.yml b/1-formats/a2ml/meta/.github/workflows/mirror.yml index f8cab9834..639988aa6 100644 --- a/1-formats/a2ml/meta/.github/workflows/mirror.yml +++ b/1-formats/a2ml/meta/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/1-formats/a2ml/meta/.github/workflows/scorecard-enforcer.yml b/1-formats/a2ml/meta/.github/workflows/scorecard-enforcer.yml index bc402ba34..61a6ea9d9 100644 --- a/1-formats/a2ml/meta/.github/workflows/scorecard-enforcer.yml +++ b/1-formats/a2ml/meta/.github/workflows/scorecard-enforcer.yml @@ -14,5 +14,8 @@ permissions: jobs: scorecard: - uses: ../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/1-formats/a2ml/meta/.github/workflows/scorecard.yml b/1-formats/a2ml/meta/.github/workflows/scorecard.yml index 3555ab839..6aeb4b316 100644 --- a/1-formats/a2ml/meta/.github/workflows/scorecard.yml +++ b/1-formats/a2ml/meta/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/1-formats/a2ml/meta/.github/workflows/secret-scanner.yml b/1-formats/a2ml/meta/.github/workflows/secret-scanner.yml index b3cca405d..682b40939 100644 --- a/1-formats/a2ml/meta/.github/workflows/secret-scanner.yml +++ b/1-formats/a2ml/meta/.github/workflows/secret-scanner.yml @@ -17,5 +17,5 @@ jobs: scan: permissions: contents: read - uses: ../../.github/workflows/secret-scanner-reusable.yml + uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/2-protocols/0-ai-gatekeeper/.github/workflows/codeql.yml b/2-protocols/0-ai-gatekeeper/.github/workflows/codeql.yml index 261b34bb2..e6bdb0e71 100644 --- a/2-protocols/0-ai-gatekeeper/.github/workflows/codeql.yml +++ b/2-protocols/0-ai-gatekeeper/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/2-protocols/0-ai-gatekeeper/.github/workflows/governance.yml b/2-protocols/0-ai-gatekeeper/.github/workflows/governance.yml index 64ce492be..bd68b4c8a 100644 --- a/2-protocols/0-ai-gatekeeper/.github/workflows/governance.yml +++ b/2-protocols/0-ai-gatekeeper/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/2-protocols/0-ai-gatekeeper/.github/workflows/hypatia-scan.yml b/2-protocols/0-ai-gatekeeper/.github/workflows/hypatia-scan.yml index 4bc2b3815..fbd881243 100644 --- a/2-protocols/0-ai-gatekeeper/.github/workflows/hypatia-scan.yml +++ b/2-protocols/0-ai-gatekeeper/.github/workflows/hypatia-scan.yml @@ -17,5 +17,9 @@ permissions: jobs: scan: - uses: ../../.github/workflows/hypatia-scan-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/2-protocols/0-ai-gatekeeper/.github/workflows/mirror.yml b/2-protocols/0-ai-gatekeeper/.github/workflows/mirror.yml index f8cab9834..639988aa6 100644 --- a/2-protocols/0-ai-gatekeeper/.github/workflows/mirror.yml +++ b/2-protocols/0-ai-gatekeeper/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard-enforcer.yml b/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard-enforcer.yml index eb4e48ead..57bcadd66 100644 --- a/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard-enforcer.yml +++ b/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard-enforcer.yml @@ -14,4 +14,7 @@ permissions: jobs: scorecard: - uses: ../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard.yml b/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard.yml index 7a3b59079..31924ff83 100644 --- a/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard.yml +++ b/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard.yml @@ -20,5 +20,8 @@ permissions: jobs: scorecard: - uses: ../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/2-protocols/0-ai-gatekeeper/.github/workflows/secret-scanner.yml b/2-protocols/0-ai-gatekeeper/.github/workflows/secret-scanner.yml index b3cca405d..682b40939 100644 --- a/2-protocols/0-ai-gatekeeper/.github/workflows/secret-scanner.yml +++ b/2-protocols/0-ai-gatekeeper/.github/workflows/secret-scanner.yml @@ -17,5 +17,5 @@ jobs: scan: permissions: contents: read - uses: ../../.github/workflows/secret-scanner-reusable.yml + uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/2-protocols/axel/.github/workflows/codeql.yml b/2-protocols/axel/.github/workflows/codeql.yml index 1e6a4aa01..b9e0a2604 100644 --- a/2-protocols/axel/.github/workflows/codeql.yml +++ b/2-protocols/axel/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-actions: - uses: ../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: actions diff --git a/2-protocols/axel/.github/workflows/governance.yml b/2-protocols/axel/.github/workflows/governance.yml index 64ce492be..bd68b4c8a 100644 --- a/2-protocols/axel/.github/workflows/governance.yml +++ b/2-protocols/axel/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/2-protocols/axel/.github/workflows/scorecard.yml b/2-protocols/axel/.github/workflows/scorecard.yml index 3555ab839..6aeb4b316 100644 --- a/2-protocols/axel/.github/workflows/scorecard.yml +++ b/2-protocols/axel/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/.github/workflows/codeql.yml b/rhodium-standard-repositories/.github/workflows/codeql.yml index d63f446eb..215fb7622 100644 --- a/rhodium-standard-repositories/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/.github/workflows/governance.yml b/rhodium-standard-repositories/.github/workflows/governance.yml index 64ce492be..bd68b4c8a 100644 --- a/rhodium-standard-repositories/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/.github/workflows/hypatia-scan.yml b/rhodium-standard-repositories/.github/workflows/hypatia-scan.yml index 4bc2b3815..fbd881243 100644 --- a/rhodium-standard-repositories/.github/workflows/hypatia-scan.yml +++ b/rhodium-standard-repositories/.github/workflows/hypatia-scan.yml @@ -17,5 +17,9 @@ permissions: jobs: scan: - uses: ../../.github/workflows/hypatia-scan-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/.github/workflows/mirror.yml b/rhodium-standard-repositories/.github/workflows/mirror.yml index f8cab9834..639988aa6 100644 --- a/rhodium-standard-repositories/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/.github/workflows/scorecard-enforcer.yml b/rhodium-standard-repositories/.github/workflows/scorecard-enforcer.yml index eb4e48ead..57bcadd66 100644 --- a/rhodium-standard-repositories/.github/workflows/scorecard-enforcer.yml +++ b/rhodium-standard-repositories/.github/workflows/scorecard-enforcer.yml @@ -14,4 +14,7 @@ permissions: jobs: scorecard: - uses: ../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/.github/workflows/scorecard.yml b/rhodium-standard-repositories/.github/workflows/scorecard.yml index 7a3b59079..31924ff83 100644 --- a/rhodium-standard-repositories/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/.github/workflows/scorecard.yml @@ -20,5 +20,8 @@ permissions: jobs: scorecard: - uses: ../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/.github/workflows/secret-scanner.yml b/rhodium-standard-repositories/.github/workflows/secret-scanner.yml index b3cca405d..682b40939 100644 --- a/rhodium-standard-repositories/.github/workflows/secret-scanner.yml +++ b/rhodium-standard-repositories/.github/workflows/secret-scanner.yml @@ -17,5 +17,5 @@ jobs: scan: permissions: contents: read - uses: ../../.github/workflows/secret-scanner-reusable.yml + uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/META.scm/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/META.scm/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/META.scm/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/META.scm/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/META.scm/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/META.scm/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/META.scm/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/META.scm/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/cccp/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/cccp/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/cccp/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/cccp/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/cccp/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/cccp/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/cccp/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/cccp/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/cccp/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/cccp/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/cccp/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/cccp/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard-enforcer.yml b/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard-enforcer.yml index aaa3c2cbf..61a6ea9d9 100644 --- a/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard-enforcer.yml +++ b/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard-enforcer.yml @@ -14,5 +14,8 @@ permissions: jobs: scorecard: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/.github/workflows/secret-scanner.yml b/rhodium-standard-repositories/satellites/cccp/.github/workflows/secret-scanner.yml index 2869b2f1e..682b40939 100644 --- a/rhodium-standard-repositories/satellites/cccp/.github/workflows/secret-scanner.yml +++ b/rhodium-standard-repositories/satellites/cccp/.github/workflows/secret-scanner.yml @@ -17,5 +17,5 @@ jobs: scan: permissions: contents: read - uses: ../../../../.github/workflows/secret-scanner-reusable.yml + uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/governance.yml index 8c4a1396a..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/mirror.yml index d26c06b08..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/codeql.yml index 584421dac..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/governance.yml index 8d36c8d92..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/mirror.yml index e0ce572f7..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/scorecard.yml index aa51311d8..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/codeql.yml index 694b024ce..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/governance.yml index 8c4a1396a..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/mirror.yml index d26c06b08..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/scorecard.yml index 2267ee606..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/codeql.yml index 694b024ce..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/governance.yml index 8c4a1396a..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/mirror.yml index d26c06b08..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/scorecard.yml index 2267ee606..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/codeql.yml index 0792d986c..c3523abe0 100644 --- a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-ruby: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: ruby diff --git a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit