Skip to content

chore(deps): update ferrlabs/.github digest to 6cbce94 - #73

Merged
ferrlabs-renovate[bot] merged 1 commit into
mainfrom
renovate/ferrlabs-actions
Oct 25, 2026
Merged

ferrlabs-renovate[bot] merged 1 commit into
mainfrom
renovate/ferrlabs-actions

Conversation

@ferrlabs-renovate

@ferrlabs-renovate ferrlabs-renovate Bot commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
FerrLabs/.github (changelog) workflow digest 2c2284f → 6cbce94

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@ferrlabs-renovate
ferrlabs-renovate Bot enabled auto-merge (squash) October 21, 2026 18:04
Comment thread .github/workflows/security-scan.yml Fixed

@ferrfleet-interne ferrfleet-interne Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Digest bump of the reusable security-scan workflow. It stays pinned to a full SHA, and the permissions and secrets: inherit are unchanged. Nothing blocking.

@ferrlabs-renovate
ferrlabs-renovate Bot force-pushed the renovate/ferrlabs-actions branch from a3bbbcd to 07cf6dd Compare October 25, 2026 10:06
@ferrlabs-renovate ferrlabs-renovate Bot changed the title chore(deps): update ferrlabs/.github digest to 40aa5d1 chore(deps): update ferrlabs/.github digest to 6cbce94 Oct 25, 2026
@ferrlabs-renovate
ferrlabs-renovate Bot merged commit c3182ee into main Oct 25, 2026
15 checks passed

@ferrfleet-interne ferrfleet-interne Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Re-pinned to 6cbce94 (FerrLabs/.github#404), which moves caller inputs out of run: blocks into env:, a script-injection hardening of the reusable security scan. It is still a full-SHA pin, and permissions and secrets: inherit are unchanged. Nothing blocking.

contents: read
security-events: write
uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@2c2284f732c93ae57a8b30b31ab93e64843cf3c7 # main
uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@6cbce9484213fb41b2384441f01fa4bf1b9a6983 # main
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant