Clément SAILLANTandClaude Opus 4.6
55fe558f63
- Fix dependency_update.yml syntax error (uses: after run:) - Restrict scope_guard.py allowlist: ai:impl no longer allows all tools/, ai:qa no longer allows tools/gates/, ai:docs no longer allows specs/ - Fix signing key exposure in release_signing.yml and supply_chain.yml by using env://COSIGN_KEY instead of inline secret interpolation - Fix specify_init.py hyphen normalization bug (multiple consecutive hyphens) - Add explicit permissions blocks to 15 workflows for least-privilege - Add file existence checks and encoding error handling to compose_codex_prompt.py - Fix schops.py: backup_file() error handling, delimiter-aware lib_id matching Co-Authored-By: Claude Opus 4.6 <[email protected]>
27 lines
638 B
YAML
27 lines
638 B
YAML
name: Automated Dependency Update
|
|
|
|
on:
|
|
schedule:
|
|
- cron: '0 3 * * 1'
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
dependabot:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- name: Run Dependabot (exemple)
|
|
run: |
|
|
echo "Dependabot run..."
|
|
- name: Generate dependency update report
|
|
run: |
|
|
mkdir -p docs
|
|
echo '{"status":"ok","generated_by":"dependabot"}' > docs/dependabot-report.json
|
|
- name: Upload dependency update report
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: dependabot
|
|
path: docs/dependabot-report.json
|