fix: correct security-scan.yml reusable-workflow call #6

Merged

james merged 1 commit from fix/security-scan-input into main

2026-09-06 21:55:57 +00:00

james commented

2026-09-06 21:51:18 +00:00

Owner

Same fix as colibrisec/balam#13 � security-scan.yml was passing with: repository: colibrisec/ojo-forgejo (wrong key, wrong value). Depends on colibrisec/forgejo-workflows#3, which drops the input entirely, so this also removes the now-unnecessary with: block from both workflows and switches secrets: inherit to explicit mapping.

Same fix as colibrisec/balam#13 � `security-scan.yml` was passing `with: repository: colibrisec/ojo-forgejo` (wrong key, wrong value). Depends on colibrisec/forgejo-workflows#3, which drops the input entirely, so this also removes the now-unnecessary `with:` block from both workflows and switches `secrets: inherit` to explicit mapping.

james added 1 commit

2026-09-06 21:51:18 +00:00

fix: use simplified input-free reusable workflows, correct SHA pin

security-scan / scan-1 (pull_request) Successful in 18s

Details

security-scan / scan (pull_request) Successful in 0s

Details

test / test (pull_request) Successful in 5s

Details

2e03b31c71

Supersedes the earlier product-name/repository input-based version: the
shared workflows (colibrisec/forgejo-workflows) now derive the calling
repo's name from github.repository internally, so callers need nothing
but uses: + secrets:.

james referenced this pull request from ColibriSec/ojo-forgejo

2026-09-06 21:52:33 +00:00

fix: correct security-scan.yml reusable-workflow call #15

james merged commit d82d6a140c into main

2026-09-06 21:55:56 +00:00

james referenced this pull request from a commit

2026-09-06 21:55:57 +00:00

Merge pull request 'fix: correct security-scan.yml reusable-workflow call' (#6) from fix/security-scan-input into main

james deleted branch fix/security-scan-input

2026-09-06 21:55:58 +00:00