Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions .github/workflows/capture-baseline.yml
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@ jobs:
skill: [hawkscan, api, stackhawk-data-seed, hawkscan-ci, optimize]
model: [claude-sonnet-4-6, claude-opus-4-7, claude-haiku-4-5-20251001]
steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
with:
ref: ${{ inputs.tag }}
- uses: astral-sh/setup-uv@v5
Expand Down Expand Up @@ -126,7 +126,7 @@ jobs:
skill: [hawkscan, api, stackhawk-data-seed, hawkscan-ci, optimize]
model: [gpt-5.5, o3]
steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
with:
ref: ${{ inputs.tag }}
- uses: astral-sh/setup-uv@v5
Expand Down Expand Up @@ -206,7 +206,7 @@ jobs:
skill: [hawkscan, api, stackhawk-data-seed, hawkscan-ci, optimize]
model: [default]
steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
with:
ref: ${{ inputs.tag }}
- uses: astral-sh/setup-uv@v5
Expand Down Expand Up @@ -286,7 +286,7 @@ jobs:
skill: [hawkscan, api, stackhawk-data-seed, hawkscan-ci, optimize]
model: [default]
steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
with:
ref: ${{ inputs.tag }}
- uses: astral-sh/setup-uv@v5
Expand Down Expand Up @@ -353,7 +353,7 @@ jobs:
if: always()
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
- uses: astral-sh/setup-uv@v5
# download-artifact@v4 does NOT fail when the pattern matches zero artifacts
# (it has no error-on-no-artifacts input) — so a run where every capture job
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/claude-pr-review-action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,7 @@ jobs:
id-token: write
steps:
- name: Check out repository code
uses: actions/checkout@v7
uses: actions/checkout@v7.0.1
with:
fetch-depth: 0

Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/generate-and-validate.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ jobs:
validate:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Validate SKILL.md frontmatter
run: |
Expand Down Expand Up @@ -208,7 +208,7 @@ jobs:
generate-cursor-rules:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Generate Cursor rules
run: bash scripts/generate-cursor-rules.sh
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/marketplace-install-verify.yml
Original file line number Diff line number Diff line change
Expand Up @@ -79,7 +79,7 @@ jobs:
if: ${{ inputs.tool == 'all' || inputs.tool == 'claude-code' }}
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
with:
fetch-depth: 0 # need tags for `git describe` in local mode
- name: Install Claude Code CLI (native)
Expand Down Expand Up @@ -132,7 +132,7 @@ jobs:
if: ${{ inputs.tool == 'all' || inputs.tool == 'codex' }}
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
with:
fetch-depth: 0
- name: Rewrite git SSH->HTTPS
Expand Down Expand Up @@ -195,7 +195,7 @@ jobs:
if: ${{ inputs.tool == 'all' || inputs.tool == 'copilot' }}
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
with:
fetch-depth: 0
- uses: actions/setup-node@v6
Expand Down Expand Up @@ -269,7 +269,7 @@ jobs:
if: ${{ inputs.tool == 'all' || inputs.tool == 'agy' }}
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
with:
fetch-depth: 0
- name: Rewrite git SSH->HTTPS
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/publish-eval-badges.yml
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ jobs:
# stays available as the deliberate "publish this run anyway" override.
if: github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success'
steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
with:
fetch-depth: 0 # tags needed for the meta-artifact fallback below

Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ jobs:
echo "version=${version}" >> "$GITHUB_OUTPUT"
echo "Running release for tag: ${tag}"

- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
ref: ${{ steps.version.outputs.tag }}

Expand Down Expand Up @@ -135,7 +135,7 @@ jobs:
permissions:
actions: write
steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
- name: Dispatch capture-baseline
# GITHUB_TOKEN can dispatch workflows in the same repo for most orgs.
# If org policy blocks it, swap to the TF_GITHUB_TOKEN PAT that
Expand All @@ -162,7 +162,7 @@ jobs:
- name: Pull secrets
run: biodome ci save-secrets

- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
ref: ${{ needs.release.outputs.tag }}

Expand Down
14 changes: 7 additions & 7 deletions .github/workflows/skill-evals.yml
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@ jobs:
name: validate eval config
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
- uses: astral-sh/setup-uv@v5
- name: Validate prompts.yaml + process-checks.json
run: uv run validate
Expand All @@ -63,7 +63,7 @@ jobs:
name: pytest (lib)
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
- uses: astral-sh/setup-uv@v5
- name: Run lib tests
run: uv run pytest -q
Expand All @@ -83,7 +83,7 @@ jobs:
model: [claude-sonnet-4-6, claude-opus-4-7, claude-haiku-4-5-20251001]

steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
- uses: astral-sh/setup-uv@v5

- name: Install Claude Code CLI (native)
Expand Down Expand Up @@ -180,7 +180,7 @@ jobs:
model: [gpt-5.5, o3]

steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
- uses: astral-sh/setup-uv@v5
- uses: actions/setup-node@v6
with:
Expand Down Expand Up @@ -274,7 +274,7 @@ jobs:
# model: [default]
#
# steps:
# - uses: actions/checkout@v7
# - uses: actions/checkout@v7.0.1
# - uses: astral-sh/setup-uv@v5
# - name: Install Claude Code CLI (native, rubric grader)
# run: |
Expand Down Expand Up @@ -373,7 +373,7 @@ jobs:
model: [default]

steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
- uses: astral-sh/setup-uv@v5

- name: Install Cursor CLI
Expand Down Expand Up @@ -449,7 +449,7 @@ jobs:
pull-requests: write

steps:
- uses: actions/checkout@v7
- uses: actions/checkout@v7.0.1
with:
fetch-depth: 0
- uses: actions/download-artifact@v8
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/tag-on-merge.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ jobs:
tag:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Create version tag
run: |
Expand Down
Loading