Skip to content

Fix/ci timeout minutes reusable #50

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
hyperpolymath merged 9 commits into from
Sep 18, 2026
Merged

Fix/ci timeout minutes reusable #50

Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
ecb5936
fix(ci): switch to permissionless reusable workflow
hyperpolymath Jul 7, 2026
d9f3142
fix(ci): clear OSSF Scorecard startup_failure
Jul 7, 2026
752f626
fix: update CodeQL actions to SHA-pinned v3 (29b1f65c)
hyperpolymath Jul 26, 2026
5765ae5
fix(ci): update reusable workflow pins to @892497fe + remove excessiv…
hyperpolymath Aug 12, 2026
d51a10b
Merge remote-tracking branch 'origin/main' into fix/ci-timeout-minute…
hyperpolymath Aug 12, 2026
4de7aba
Merge branch 'main' of github.com:hyperpolymath/anytype into fix/ci-t…
hyperpolymath Aug 18, 2026
38d6fee
Merge remote-tracking branch 'origin/ci/fix-ossf-scorecard-startup' i…
hyperpolymath Aug 18, 2026
a57ec77
Fix TokenPermissionsID: apply least-privilege permissions
mistral-vibe Sep 11, 2026
185730a
Merge branch 'main' into fix/ci-timeout-minutes-reusable
hyperpolymath Sep 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 1 addition & 4 deletions .github/workflows/scorecard.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,10 +14,7 @@ permissions:

jobs:
scorecard:
uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@571cc734cd69fb846032ec77a662aa8ee4fc32cd
# Reusable called-workflow permissions are CAPPED by the caller's grants;
# without security-events: write here the scorecard SARIF upload fails with
# startup_failure (hypatia WF018). id-token: write enables OIDC publish.
uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e
permissions:
contents: read
security-events: write
Expand Down
Loading