From 5d85bd11bda570b397e18d7e25b47b40ed4cf268 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 22 Aug 2026 06:10:46 -0700 Subject: [PATCH 1/2] test(oidc): require current central workflow source --- test/trusted-workflow-source-rollforward.test.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/test/trusted-workflow-source-rollforward.test.ts b/test/trusted-workflow-source-rollforward.test.ts index 7fe53b243..24dd207bb 100644 --- a/test/trusted-workflow-source-rollforward.test.ts +++ b/test/trusted-workflow-source-rollforward.test.ts @@ -2,7 +2,7 @@ import { readFileSync } from "node:fs"; import { describe, expect, it } from "vitest"; const auditedCentralWorkflowSourceSha = - "322004186dd34736bc073e69406c41d2f435f8e4"; + "daf5ad43b48c826a3a119f385a2f80bef893ae49"; describe("trusted central workflow source revision", () => { it("binds the deployed OIDC trust configuration to the audited central source commit", () => { From 2c047f0f404228fd0a0ee953bd0872e8d5164ee4 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 22 Aug 2026 06:11:44 -0700 Subject: [PATCH 2/2] fix(oidc): trust current central workflow source --- wrangler.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wrangler.toml b/wrangler.toml index 22b6d361e..321c8dc6a 100644 --- a/wrangler.toml +++ b/wrangler.toml @@ -24,7 +24,7 @@ ALLOWED_AUDIENCE = "cwl-noema-review" ALLOWED_REPOSITORY_OWNER = "ContextualWisdomLab" ALLOWED_WORKFLOW_REPOSITORY = "ContextualWisdomLab/.github" ALLOWED_WORKFLOW_REF_PREFIX = "ContextualWisdomLab/.github/.github/workflows/noema-review.yml@refs/heads/main" -ALLOWED_WORKFLOW_SHA = "322004186dd34736bc073e69406c41d2f435f8e4" +ALLOWED_WORKFLOW_SHA = "daf5ad43b48c826a3a119f385a2f80bef893ae49" GITHUB_API_BASE = "https://api.github.com" GITHUB_APP_SLUG = "noema" NOEMA_RATE_LIMIT_PER_MINUTE = "60"