From 09b924c7d777de5161a652ea30114a4524cc3014 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Sat, 19 Sep 2026 19:41:04 +0000 Subject: [PATCH] =?UTF-8?q?fix(ci):=20call=20the=20estate=20reusables=20by?= =?UTF-8?q?=20their=20real=20ref=20=E2=80=94=20root=20and=20nested=20copie?= =?UTF-8?q?s?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit `uses: ../….github/workflows/-reusable.yml` is not a ref form GitHub Actions supports, so every workflow carrying it fails at parse time: conclusion=failure, 0 jobs, and a run name equal to its path rather than its declared `name:`. This repairs them throughout the tree, not only in the root `.github/workflows/`, because the root is where they are *live* but the nested copies are where they *propagate* — standards' format templates, k9-ecosystem's dispatch templates and deed-core's action scaffolds are what new repos are minted from, and each one carried an unparseable ref. Each ref becomes the pinned cross-repo form `hyperpolymath/standards/.github/workflows/-reusable.yml@4e6ffe55…`, and each calling job is granted the permissions its callee declares — keyed off the callee named in the ref, since several callers point at the same reusable. Without that step the repair only moves the failure from parse time to run time. Refs hyperpolymath/standards#808. --- 1-formats/a2ml/meta/.github/workflows/codeql.yml | 6 +++++- 1-formats/a2ml/meta/.github/workflows/governance.yml | 5 ++++- 1-formats/a2ml/meta/.github/workflows/hypatia-scan.yml | 6 +++++- 1-formats/a2ml/meta/.github/workflows/mirror.yml | 5 ++++- .../a2ml/meta/.github/workflows/scorecard-enforcer.yml | 5 ++++- 1-formats/a2ml/meta/.github/workflows/scorecard.yml | 5 ++++- 1-formats/a2ml/meta/.github/workflows/secret-scanner.yml | 2 +- 2-protocols/0-ai-gatekeeper/.github/workflows/codeql.yml | 6 +++++- .../0-ai-gatekeeper/.github/workflows/governance.yml | 5 ++++- .../0-ai-gatekeeper/.github/workflows/hypatia-scan.yml | 6 +++++- 2-protocols/0-ai-gatekeeper/.github/workflows/mirror.yml | 5 ++++- .../.github/workflows/scorecard-enforcer.yml | 5 ++++- 2-protocols/0-ai-gatekeeper/.github/workflows/scorecard.yml | 5 ++++- .../0-ai-gatekeeper/.github/workflows/secret-scanner.yml | 2 +- 2-protocols/axel/.github/workflows/codeql.yml | 6 +++++- 2-protocols/axel/.github/workflows/governance.yml | 5 ++++- 2-protocols/axel/.github/workflows/scorecard.yml | 5 ++++- rhodium-standard-repositories/.github/workflows/codeql.yml | 6 +++++- .../.github/workflows/governance.yml | 5 ++++- .../.github/workflows/hypatia-scan.yml | 6 +++++- rhodium-standard-repositories/.github/workflows/mirror.yml | 5 ++++- .../.github/workflows/scorecard-enforcer.yml | 5 ++++- .../.github/workflows/scorecard.yml | 5 ++++- .../.github/workflows/secret-scanner.yml | 2 +- .../satellites/ECOSYSTEM.scm/.github/workflows/codeql.yml | 6 +++++- .../ECOSYSTEM.scm/.github/workflows/governance.yml | 5 ++++- .../satellites/META.scm/.github/workflows/codeql.yml | 6 +++++- .../satellites/META.scm/.github/workflows/governance.yml | 5 ++++- .../satellites/cccp/.github/workflows/codeql.yml | 6 +++++- .../satellites/cccp/.github/workflows/governance.yml | 5 ++++- .../satellites/cccp/.github/workflows/mirror.yml | 5 ++++- .../cccp/.github/workflows/scorecard-enforcer.yml | 5 ++++- .../satellites/cccp/.github/workflows/scorecard.yml | 5 ++++- .../satellites/cccp/.github/workflows/secret-scanner.yml | 2 +- .../nextgen-languages/.github/workflows/governance.yml | 5 ++++- .../nextgen-languages/.github/workflows/mirror.yml | 5 ++++- .../7-tentacles/.github/workflows/codeql.yml | 6 +++++- .../7-tentacles/.github/workflows/governance.yml | 5 ++++- .../7-tentacles/.github/workflows/mirror.yml | 5 ++++- .../7-tentacles/.github/workflows/scorecard.yml | 5 ++++- .../cccp/satellites/php-aegis/.github/workflows/codeql.yml | 6 +++++- .../satellites/php-aegis/.github/workflows/governance.yml | 5 ++++- .../cccp/satellites/php-aegis/.github/workflows/mirror.yml | 5 ++++- .../satellites/php-aegis/.github/workflows/scorecard.yml | 5 ++++- .../satellites/sanctify-php/.github/workflows/codeql.yml | 6 +++++- .../sanctify-php/.github/workflows/governance.yml | 5 ++++- .../satellites/sanctify-php/.github/workflows/mirror.yml | 5 ++++- .../satellites/sanctify-php/.github/workflows/scorecard.yml | 5 ++++- .../satellites/mustfile/.github/workflows/codeql.yml | 6 +++++- .../satellites/mustfile/.github/workflows/governance.yml | 5 ++++- .../satellites/mustfile/.github/workflows/mirror.yml | 5 ++++- .../satellites/mustfile/.github/workflows/scorecard.yml | 5 ++++- .../palimpsest-license/.github/workflows/codeql.yml | 6 +++++- .../palimpsest-license/.github/workflows/governance.yml | 5 ++++- .../palimpsest-license/.github/workflows/mirror.yml | 5 ++++- .../palimpsest-license/.github/workflows/scorecard.yml | 5 ++++- .../robot-repo-automaton/.github/workflows/codeql.yml | 6 +++++- .../robot-repo-automaton/.github/workflows/governance.yml | 5 ++++- .../robot-repo-automaton/.github/workflows/mirror.yml | 5 ++++- .../robot-repo-automaton/.github/workflows/scorecard.yml | 5 ++++- .../satellites/rsr-certifier/.github/workflows/codeql.yml | 6 +++++- .../rsr-certifier/.github/workflows/governance.yml | 5 ++++- .../satellites/rsr-certifier/.github/workflows/mirror.yml | 5 ++++- .../rsr-certifier/.github/workflows/scorecard.yml | 5 ++++- .../satellites/rsr-deployer/.github/workflows/codeql.yml | 6 +++++- .../rsr-deployer/.github/workflows/governance.yml | 5 ++++- .../satellites/rsr-deployer/.github/workflows/mirror.yml | 5 ++++- .../satellites/rsr-deployer/.github/workflows/scorecard.yml | 5 ++++- .../satellites/state.scm/.github/workflows/codeql.yml | 6 +++++- .../satellites/state.scm/.github/workflows/governance.yml | 5 ++++- .../satellites/state.scm/.github/workflows/mirror.yml | 5 ++++- .../satellites/state.scm/.github/workflows/scorecard.yml | 5 ++++- .../well-known-ecosystem/.github/workflows/codeql.yml | 6 +++++- .../well-known-ecosystem/.github/workflows/governance.yml | 5 ++++- .../well-known-ecosystem/.github/workflows/mirror.yml | 5 ++++- .../well-known-ecosystem/.github/workflows/scorecard.yml | 5 ++++- 76 files changed, 312 insertions(+), 76 deletions(-) diff --git a/1-formats/a2ml/meta/.github/workflows/codeql.yml b/1-formats/a2ml/meta/.github/workflows/codeql.yml index 261b34bb2..e6bdb0e71 100644 --- a/1-formats/a2ml/meta/.github/workflows/codeql.yml +++ b/1-formats/a2ml/meta/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/1-formats/a2ml/meta/.github/workflows/governance.yml b/1-formats/a2ml/meta/.github/workflows/governance.yml index 64ce492be..bd68b4c8a 100644 --- a/1-formats/a2ml/meta/.github/workflows/governance.yml +++ b/1-formats/a2ml/meta/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/1-formats/a2ml/meta/.github/workflows/hypatia-scan.yml b/1-formats/a2ml/meta/.github/workflows/hypatia-scan.yml index 4bc2b3815..fbd881243 100644 --- a/1-formats/a2ml/meta/.github/workflows/hypatia-scan.yml +++ b/1-formats/a2ml/meta/.github/workflows/hypatia-scan.yml @@ -17,5 +17,9 @@ permissions: jobs: scan: - uses: ../../.github/workflows/hypatia-scan-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/1-formats/a2ml/meta/.github/workflows/mirror.yml b/1-formats/a2ml/meta/.github/workflows/mirror.yml index f8cab9834..639988aa6 100644 --- a/1-formats/a2ml/meta/.github/workflows/mirror.yml +++ b/1-formats/a2ml/meta/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/1-formats/a2ml/meta/.github/workflows/scorecard-enforcer.yml b/1-formats/a2ml/meta/.github/workflows/scorecard-enforcer.yml index bc402ba34..61a6ea9d9 100644 --- a/1-formats/a2ml/meta/.github/workflows/scorecard-enforcer.yml +++ b/1-formats/a2ml/meta/.github/workflows/scorecard-enforcer.yml @@ -14,5 +14,8 @@ permissions: jobs: scorecard: - uses: ../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/1-formats/a2ml/meta/.github/workflows/scorecard.yml b/1-formats/a2ml/meta/.github/workflows/scorecard.yml index 3555ab839..6aeb4b316 100644 --- a/1-formats/a2ml/meta/.github/workflows/scorecard.yml +++ b/1-formats/a2ml/meta/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/1-formats/a2ml/meta/.github/workflows/secret-scanner.yml b/1-formats/a2ml/meta/.github/workflows/secret-scanner.yml index b3cca405d..682b40939 100644 --- a/1-formats/a2ml/meta/.github/workflows/secret-scanner.yml +++ b/1-formats/a2ml/meta/.github/workflows/secret-scanner.yml @@ -17,5 +17,5 @@ jobs: scan: permissions: contents: read - uses: ../../.github/workflows/secret-scanner-reusable.yml + uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/2-protocols/0-ai-gatekeeper/.github/workflows/codeql.yml b/2-protocols/0-ai-gatekeeper/.github/workflows/codeql.yml index 261b34bb2..e6bdb0e71 100644 --- a/2-protocols/0-ai-gatekeeper/.github/workflows/codeql.yml +++ b/2-protocols/0-ai-gatekeeper/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/2-protocols/0-ai-gatekeeper/.github/workflows/governance.yml b/2-protocols/0-ai-gatekeeper/.github/workflows/governance.yml index 64ce492be..bd68b4c8a 100644 --- a/2-protocols/0-ai-gatekeeper/.github/workflows/governance.yml +++ b/2-protocols/0-ai-gatekeeper/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/2-protocols/0-ai-gatekeeper/.github/workflows/hypatia-scan.yml b/2-protocols/0-ai-gatekeeper/.github/workflows/hypatia-scan.yml index 4bc2b3815..fbd881243 100644 --- a/2-protocols/0-ai-gatekeeper/.github/workflows/hypatia-scan.yml +++ b/2-protocols/0-ai-gatekeeper/.github/workflows/hypatia-scan.yml @@ -17,5 +17,9 @@ permissions: jobs: scan: - uses: ../../.github/workflows/hypatia-scan-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/2-protocols/0-ai-gatekeeper/.github/workflows/mirror.yml b/2-protocols/0-ai-gatekeeper/.github/workflows/mirror.yml index f8cab9834..639988aa6 100644 --- a/2-protocols/0-ai-gatekeeper/.github/workflows/mirror.yml +++ b/2-protocols/0-ai-gatekeeper/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard-enforcer.yml b/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard-enforcer.yml index eb4e48ead..57bcadd66 100644 --- a/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard-enforcer.yml +++ b/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard-enforcer.yml @@ -14,4 +14,7 @@ permissions: jobs: scorecard: - uses: ../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard.yml b/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard.yml index 7a3b59079..31924ff83 100644 --- a/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard.yml +++ b/2-protocols/0-ai-gatekeeper/.github/workflows/scorecard.yml @@ -20,5 +20,8 @@ permissions: jobs: scorecard: - uses: ../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/2-protocols/0-ai-gatekeeper/.github/workflows/secret-scanner.yml b/2-protocols/0-ai-gatekeeper/.github/workflows/secret-scanner.yml index b3cca405d..682b40939 100644 --- a/2-protocols/0-ai-gatekeeper/.github/workflows/secret-scanner.yml +++ b/2-protocols/0-ai-gatekeeper/.github/workflows/secret-scanner.yml @@ -17,5 +17,5 @@ jobs: scan: permissions: contents: read - uses: ../../.github/workflows/secret-scanner-reusable.yml + uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/2-protocols/axel/.github/workflows/codeql.yml b/2-protocols/axel/.github/workflows/codeql.yml index 1e6a4aa01..b9e0a2604 100644 --- a/2-protocols/axel/.github/workflows/codeql.yml +++ b/2-protocols/axel/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-actions: - uses: ../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: actions diff --git a/2-protocols/axel/.github/workflows/governance.yml b/2-protocols/axel/.github/workflows/governance.yml index 64ce492be..bd68b4c8a 100644 --- a/2-protocols/axel/.github/workflows/governance.yml +++ b/2-protocols/axel/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/2-protocols/axel/.github/workflows/scorecard.yml b/2-protocols/axel/.github/workflows/scorecard.yml index 3555ab839..6aeb4b316 100644 --- a/2-protocols/axel/.github/workflows/scorecard.yml +++ b/2-protocols/axel/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/.github/workflows/codeql.yml b/rhodium-standard-repositories/.github/workflows/codeql.yml index d63f446eb..215fb7622 100644 --- a/rhodium-standard-repositories/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/.github/workflows/governance.yml b/rhodium-standard-repositories/.github/workflows/governance.yml index 64ce492be..bd68b4c8a 100644 --- a/rhodium-standard-repositories/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/.github/workflows/hypatia-scan.yml b/rhodium-standard-repositories/.github/workflows/hypatia-scan.yml index 4bc2b3815..fbd881243 100644 --- a/rhodium-standard-repositories/.github/workflows/hypatia-scan.yml +++ b/rhodium-standard-repositories/.github/workflows/hypatia-scan.yml @@ -17,5 +17,9 @@ permissions: jobs: scan: - uses: ../../.github/workflows/hypatia-scan-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/.github/workflows/mirror.yml b/rhodium-standard-repositories/.github/workflows/mirror.yml index f8cab9834..639988aa6 100644 --- a/rhodium-standard-repositories/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/.github/workflows/scorecard-enforcer.yml b/rhodium-standard-repositories/.github/workflows/scorecard-enforcer.yml index eb4e48ead..57bcadd66 100644 --- a/rhodium-standard-repositories/.github/workflows/scorecard-enforcer.yml +++ b/rhodium-standard-repositories/.github/workflows/scorecard-enforcer.yml @@ -14,4 +14,7 @@ permissions: jobs: scorecard: - uses: ../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/.github/workflows/scorecard.yml b/rhodium-standard-repositories/.github/workflows/scorecard.yml index 7a3b59079..31924ff83 100644 --- a/rhodium-standard-repositories/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/.github/workflows/scorecard.yml @@ -20,5 +20,8 @@ permissions: jobs: scorecard: - uses: ../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/.github/workflows/secret-scanner.yml b/rhodium-standard-repositories/.github/workflows/secret-scanner.yml index b3cca405d..682b40939 100644 --- a/rhodium-standard-repositories/.github/workflows/secret-scanner.yml +++ b/rhodium-standard-repositories/.github/workflows/secret-scanner.yml @@ -17,5 +17,5 @@ jobs: scan: permissions: contents: read - uses: ../../.github/workflows/secret-scanner-reusable.yml + uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/META.scm/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/META.scm/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/META.scm/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/META.scm/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/META.scm/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/META.scm/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/META.scm/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/META.scm/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/cccp/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/cccp/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/cccp/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/cccp/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/cccp/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/cccp/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/cccp/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/cccp/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/cccp/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/cccp/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/cccp/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/cccp/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard-enforcer.yml b/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard-enforcer.yml index aaa3c2cbf..61a6ea9d9 100644 --- a/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard-enforcer.yml +++ b/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard-enforcer.yml @@ -14,5 +14,8 @@ permissions: jobs: scorecard: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/cccp/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/.github/workflows/secret-scanner.yml b/rhodium-standard-repositories/satellites/cccp/.github/workflows/secret-scanner.yml index 2869b2f1e..682b40939 100644 --- a/rhodium-standard-repositories/satellites/cccp/.github/workflows/secret-scanner.yml +++ b/rhodium-standard-repositories/satellites/cccp/.github/workflows/secret-scanner.yml @@ -17,5 +17,5 @@ jobs: scan: permissions: contents: read - uses: ../../../../.github/workflows/secret-scanner-reusable.yml + uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/governance.yml index 8c4a1396a..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/mirror.yml index d26c06b08..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/codeql.yml index 584421dac..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/governance.yml index 8d36c8d92..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/mirror.yml index e0ce572f7..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/scorecard.yml index aa51311d8..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/codeql.yml index 694b024ce..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/governance.yml index 8c4a1396a..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/mirror.yml index d26c06b08..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/scorecard.yml index 2267ee606..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/codeql.yml index 694b024ce..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/governance.yml index 8c4a1396a..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/mirror.yml index d26c06b08..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/scorecard.yml index 2267ee606..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/mustfile/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/mustfile/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/codeql.yml index 0792d986c..c3523abe0 100644 --- a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-ruby: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: ruby diff --git a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/palimpsest-license/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/rsr-certifier/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/rsr-deployer/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/state.scm/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/state.scm/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/codeql.yml b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/codeql.yml index b733a3036..e6bdb0e71 100644 --- a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/codeql.yml +++ b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/codeql.yml @@ -18,6 +18,10 @@ permissions: jobs: analyze-js: - uses: ../../../../.github/workflows/codeql-reusable.yml + permissions: + actions: read + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/codeql-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 with: language: javascript-typescript diff --git a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/governance.yml b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/governance.yml index 7bd1de9ce..bd68b4c8a 100644 --- a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/governance.yml +++ b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/governance.yml @@ -24,4 +24,7 @@ permissions: jobs: governance: - uses: ../../../../.github/workflows/governance-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 diff --git a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/mirror.yml b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/mirror.yml index 9e0c210b5..639988aa6 100644 --- a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/mirror.yml +++ b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/mirror.yml @@ -11,5 +11,8 @@ permissions: jobs: mirror: - uses: ../../../../.github/workflows/mirror-reusable.yml + permissions: + actions: read + contents: read + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit diff --git a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/scorecard.yml b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/scorecard.yml index c578c61c1..6aeb4b316 100644 --- a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/scorecard.yml +++ b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/workflows/scorecard.yml @@ -12,5 +12,8 @@ permissions: read-all jobs: analysis: - uses: ../../../../.github/workflows/scorecard-reusable.yml + permissions: + contents: read + security-events: write + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@4e6ffe5568d7864f540d99c7d4ea9b9250ed30f2 secrets: inherit