diff --git a/.github/workflows/README.md b/.github/workflows/README.md index 83916a1..584f6f6 100644 --- a/.github/workflows/README.md +++ b/.github/workflows/README.md @@ -6,7 +6,7 @@ benchmarks run from the maintainers' private `nddev-harnesses` control plane against a pinned submodule revision. Reusable workflows are sourced from -[`NDDev-it-com/nddev-ci-workflows`](https://github.com/NDDev-it-com/nddev-ci-workflows) +[`NDDev-it-com/ci-workflows`](https://github.com/NDDev-it-com/ci-workflows) release `0.10.0`, pinned to commit `eb7bd953dc9741e559cb9e357c2d36c9b4de5a88`. diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml index 418507e..acc6fc3 100644 --- a/.github/workflows/actionlint.yml +++ b/.github/workflows/actionlint.yml @@ -19,4 +19,4 @@ jobs: name: actionlint permissions: contents: read - uses: NDDev-it-com/nddev-ci-workflows/.github/workflows/actionlint.yml@eb7bd953dc9741e559cb9e357c2d36c9b4de5a88 # 0.10.0 + uses: NDDev-it-com/ci-workflows/.github/workflows/actionlint.yml@eb7bd953dc9741e559cb9e357c2d36c9b4de5a88 # 0.10.0 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 83ac794..ac73780 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -21,7 +21,7 @@ jobs: contents: read security-events: write # Publish CodeQL analysis to code scanning. actions: read # Read workflow metadata for the actions language. - uses: NDDev-it-com/nddev-ci-workflows/.github/workflows/public-codeql.yml@eb7bd953dc9741e559cb9e357c2d36c9b4de5a88 # 0.10.0 + uses: NDDev-it-com/ci-workflows/.github/workflows/public-codeql.yml@eb7bd953dc9741e559cb9e357c2d36c9b4de5a88 # 0.10.0 with: languages: '["actions"]' queries: security-and-quality diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 153f895..1585e1c 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -16,4 +16,4 @@ jobs: permissions: contents: read pull-requests: write # Comment when dependency policy rejects a change. - uses: NDDev-it-com/nddev-ci-workflows/.github/workflows/public-dependency-review.yml@eb7bd953dc9741e559cb9e357c2d36c9b4de5a88 # 0.10.0 + uses: NDDev-it-com/ci-workflows/.github/workflows/public-dependency-review.yml@eb7bd953dc9741e559cb9e357c2d36c9b4de5a88 # 0.10.0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 508337b..4e88ac5 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -290,7 +290,7 @@ jobs: id-token: write # Exchange workflow identity for attestations. attestations: write # Publish provenance and SBOM attestations. artifact-metadata: write # Record the actions/attest artifact storage entry (required at v4.1.1). - uses: NDDev-it-com/nddev-ci-workflows/.github/workflows/release-supply-chain.yml@eb7bd953dc9741e559cb9e357c2d36c9b4de5a88 # 0.10.0 + uses: NDDev-it-com/ci-workflows/.github/workflows/release-supply-chain.yml@eb7bd953dc9741e559cb9e357c2d36c9b4de5a88 # 0.10.0 with: version: ${{ github.ref_name }} package_name: nddev-zcode-app diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 55aec29..fd14a63 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -19,4 +19,4 @@ jobs: contents: read actions: read # Inspect workflow metadata for Scorecard checks. id-token: write # Obtain OIDC identity for the Scorecard artifact. - uses: NDDev-it-com/nddev-ci-workflows/.github/workflows/public-scorecard-json.yml@eb7bd953dc9741e559cb9e357c2d36c9b4de5a88 # 0.10.0 + uses: NDDev-it-com/ci-workflows/.github/workflows/public-scorecard-json.yml@eb7bd953dc9741e559cb9e357c2d36c9b4de5a88 # 0.10.0 diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml index 7d4d025..d81e0d7 100644 --- a/.github/workflows/secret-scan.yml +++ b/.github/workflows/secret-scan.yml @@ -16,4 +16,4 @@ concurrency: jobs: secret-scan: name: Secret scan - uses: NDDev-it-com/nddev-ci-workflows/.github/workflows/secret-scan.yml@eb7bd953dc9741e559cb9e357c2d36c9b4de5a88 # 0.10.0 + uses: NDDev-it-com/ci-workflows/.github/workflows/secret-scan.yml@eb7bd953dc9741e559cb9e357c2d36c9b4de5a88 # 0.10.0 diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 09a5b1e..0e94950 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -21,7 +21,7 @@ jobs: permissions: contents: read security-events: write # Publish workflow-analysis results to code scanning. - uses: NDDev-it-com/nddev-ci-workflows/.github/workflows/zizmor-sarif.yml@eb7bd953dc9741e559cb9e357c2d36c9b4de5a88 # 0.10.0 + uses: NDDev-it-com/ci-workflows/.github/workflows/zizmor-sarif.yml@eb7bd953dc9741e559cb9e357c2d36c9b4de5a88 # 0.10.0 with: persona: pedantic min_severity: low