From 05bb8d4e2c45508783e0f5887b7feaa2c8be16af Mon Sep 17 00:00:00 2001 From: "Dylan M. Taylor" Date: Tue, 10 Nov 2026 07:38:59 -0500 Subject: [PATCH] test: validate Harden-Runner egress policy against craft-common-actions#189 --- .github/workflows/packaging-lint.yml | 4 ++-- .github/workflows/sonarcloud.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/packaging-lint.yml b/.github/workflows/packaging-lint.yml index 1c1561448b..88f7008a34 100644 --- a/.github/workflows/packaging-lint.yml +++ b/.github/workflows/packaging-lint.yml @@ -19,5 +19,5 @@ concurrency: jobs: lint: - # Intentionally tracked at @main (not SHA-pinned) so org-wide CI improvements, security fixes, and build optimizations propagate without PR churn across all craftapp repos. - uses: storytold/craft-common-actions/.github/workflows/packaging-lint.yml@main + # Intentionally tracked at @ci/harden-runner (not SHA-pinned) so org-wide CI improvements, security fixes, and build optimizations propagate without PR churn across all craftapp repos. + uses: storytold/craft-common-actions/.github/workflows/packaging-lint.yml@ci/harden-runner diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index ae5de4e57d..b88ca59c38 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -17,6 +17,6 @@ concurrency: jobs: sonarcloud: - # Tracked at @main so org-wide CI improvements propagate without PR churn. - uses: storytold/craft-common-actions/.github/workflows/sonarcloud.yml@main + # Tracked at @ci/harden-runner so org-wide CI improvements propagate without PR churn. + uses: storytold/craft-common-actions/.github/workflows/sonarcloud.yml@ci/harden-runner secrets: inherit