Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/fullsend.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ jobs:
if: >-
github.event_name != 'issue_comment'
|| github.event.comment.user.type != 'Bot'
uses: conforma/.fullsend/.github/workflows/dispatch.yml@4ad36122d5c9622554c3037c7d71768dae902997 # main
uses: conforma/.fullsend/.github/workflows/dispatch.yml@cd011389fdff80dc8ef963f82f7f200901e62f5c # main

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[medium] protected-path

PR modifies a governance/infrastructure path (.github/). The change is a mechanical Renovate digest bump of the conforma/.fullsend/.github/workflows/dispatch.yml reusable-workflow ref from 4ad3612 to cd01138. Verified: the new SHA is a real commit on conforma/.fullsend@main authored by a Renovate 'Pin dependencies' PR merged by a repo maintainer. The repo's renovate.json (which extends the org-wide conforma/.github//config/renovate/renovate.json) explicitly authorizes automated dependency updates, providing tool-level authorization for this class of change. Human approval is still required for protected-path changes.

Suggested fix: A human maintainer must review and merge β€” do not rely on automated approval.

with:
event_action: ${{ github.event.action }}

Expand Down
Loading