Skip to content

ci: add shared security scans - #884

Merged
sds merged 2 commits into
mainfrom
sds/secure-ci-workflows
Sep 17, 2026
Merged

sds merged 2 commits into
mainfrom
sds/secure-ci-workflows

Conversation

@sds

@sds sds commented Sep 17, 2026

Copy link
Copy Markdown
Member

Summary

  • add the shared dependency and GitHub Actions scan workflows for pull requests
  • install secure-runner as the first step in every runner-backed job
  • grant only the OIDC permission required by secure-runner while preserving existing job permissions

Validation

  • actionlint .github/workflows/*.yml
  • ensure-secure-runner (7 runner-backed jobs secured; 2 reusable workflow callers exempt)
  • git diff --check

@vercel

vercel Bot commented Sep 17, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
tempo-docs Ready Ready Preview Sep 17, 2026 2:33am UTC

Request Review

@sds
sds merged commit aa83ffa into main Sep 17, 2026
14 checks passed
@sds
sds deleted the sds/secure-ci-workflows branch September 17, 2026 02:41

This branch was successfully deployed

1 active deployment
Preview c5a19d30 Deployed Sep 17, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant