From 50685169a0883fd29e57e44da50aeeb689e8772d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 15 Jul 2026 17:07:44 +0000 Subject: [PATCH 1/2] chore(deps): bump attested-delivery/.github/.github/workflows/reusable-scorecard.yml Bumps [attested-delivery/.github/.github/workflows/reusable-scorecard.yml](https://github.com/attested-delivery/.github) from ca91728c87beb08742325b4ed4d06fcfb261435b to ee1f93b566abc109efa0588d3d5308b4dd4a7492. - [Release notes](https://github.com/attested-delivery/.github/releases) - [Commits](https://github.com/attested-delivery/.github/compare/ca91728c87beb08742325b4ed4d06fcfb261435b...ee1f93b566abc109efa0588d3d5308b4dd4a7492) --- updated-dependencies: - dependency-name: attested-delivery/.github/.github/workflows/reusable-scorecard.yml dependency-version: ee1f93b566abc109efa0588d3d5308b4dd4a7492 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/quality-gates.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/quality-gates.yml b/.github/workflows/quality-gates.yml index c488165..eda6573 100644 --- a/.github/workflows/quality-gates.yml +++ b/.github/workflows/quality-gates.yml @@ -75,7 +75,7 @@ jobs: actions: read # attested-delivery/.github main @ ca91728 (2026-06-23) uses: >- - attested-delivery/.github/.github/workflows/reusable-scorecard.yml@ca91728c87beb08742325b4ed4d06fcfb261435b + attested-delivery/.github/.github/workflows/reusable-scorecard.yml@ee1f93b566abc109efa0588d3d5308b4dd4a7492 # IaC + license — Trivy filesystem scan (Dockerfile, manifests, licenses). # No image-ref: the container is gated by `publish = false` (template state). From b41ced4844ba97905fba9f52dca778a0882de2d9 Mon Sep 17 00:00:00 2001 From: Robert Allen Date: Wed, 15 Jul 2026 13:08:05 -0400 Subject: [PATCH 2/2] ci: retrigger checks (code scanning default setup now enabled)