From 4da970d68e2553e2aaaa4cffb8a90b8d327a8a8c Mon Sep 17 00:00:00 2001 From: Sebastian Mendel Date: Tue, 22 Sep 2026 21:50:41 +0200 Subject: [PATCH] ci: sync with netresearch/.github templates/skill MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Auto-generated by scripts/sync-template.sh. Any changes you want to keep must be declared in .github/template.yaml's intentional-drift: list — the check-template-drift.yml job will otherwise revert them on next sync. Signed-off-by: Sebastian Mendel Assisted-by: claude-code:claude-opus-5 Agent-Session: https://claude.ai/code/session_013GWpRpyiM13Rh1NMQMBJo5 Agent-Host: 0493f0 --- .github/workflows/auto-merge-deps.yml | 5 +++++ .github/workflows/security.yml | 8 +++----- 2 files changed, 8 insertions(+), 5 deletions(-) diff --git a/.github/workflows/auto-merge-deps.yml b/.github/workflows/auto-merge-deps.yml index 6b6c8ad..bba2083 100644 --- a/.github/workflows/auto-merge-deps.yml +++ b/.github/workflows/auto-merge-deps.yml @@ -14,3 +14,8 @@ jobs: permissions: contents: write pull-requests: write + # Merge with the org App so the merge commit gets a CI run (#450). + # Only these two secrets are passed, not `secrets: inherit`. + secrets: + merge-app-id: ${{ secrets.PROJECT_APP_ID }} + merge-app-private-key: ${{ secrets.PROJECT_APP_PRIVATE_KEY }} diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index c3e0b7e..3e51b2b 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -1,9 +1,7 @@ name: Security # Aggregated security scans for skill repos: -# gitleaks — secret scanning. The job and the reusable keep the -# historical `gitleaks` name; the scan itself runs -# betterleaks, which is OSS and needs no license. +# betterleaks — secret scanning (OSS, needs no license). # zizmor — static analysis of this repo's own workflows. # dependency-review — on pull requests only. # composer-audit — `composer audit` AND an Opengrep SAST scan; the called @@ -26,8 +24,8 @@ on: permissions: {} jobs: - gitleaks: - uses: netresearch/.github/.github/workflows/gitleaks.yml@main + betterleaks: + uses: netresearch/.github/.github/workflows/betterleaks.yml@main permissions: contents: read security-events: write