From 317635cc2547ea765ed4045ae8019a286ea6e72d Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 2 Sep 2026 21:39:31 +0900 Subject: [PATCH] ci(workflows): re-pin to the SHA with harden-runner + comment_summary_in_pr A peer session's org-wide survey found naruon independently carrying its own dependency-review.yml with a harden-runner egress-audit step this consolidation's original four callers lacked. That step was added to the central reusable workflow in ContextualWisdomLab/.github#1732, after this caller already merged. Re-pinning picks it up with no with: change needed. Co-Authored-By: Claude Sonnet 5 --- .github/workflows/dependency-review.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 1527d2ef..d2b98b6e 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -10,7 +10,7 @@ concurrency: jobs: dependency-review: - uses: ContextualWisdomLab/.github/.github/workflows/dependency-review.yml@0bcd22d8bb07650aafb0a8f116e4c2bbb8744f03 + uses: ContextualWisdomLab/.github/.github/workflows/dependency-review.yml@5f8e5b2a79e709c4ab1a4179a605d34c458b13a1 with: fail_on_severity: moderate continue_on_error: true