From c31f29559c09fadf31739e45a761e8b413eec41c Mon Sep 17 00:00:00 2001 From: eFAILution Date: Mon, 21 Sep 2026 13:58:44 -0400 Subject: [PATCH] chore(ci): bump argus reusable-security-hardening to 1.12.5 Rebuilds #301 against beta, which is already on 1.12.4 (#293) while main is still on 1.12.3, so the one-line change conflicted on retarget. SHA 6040db47 verified as the 1.12.5 tag in huntridge-labs/argus. The reusable workflow's own diff across 1.12.4..1.12.5 is only its internal @1.12.4 -> @1.12.5 job references; the release otherwise carries dependency bumps and a clamav digest re-pin (argus#426). --- .github/workflows/security-hardening.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security-hardening.yml b/.github/workflows/security-hardening.yml index 6c4ecfc..aefb63d 100644 --- a/.github/workflows/security-hardening.yml +++ b/.github/workflows/security-hardening.yml @@ -22,7 +22,7 @@ jobs: # SHA-pinned rather than tag-pinned for supply-chain safety: a tag can be moved, a commit cannot. # Dependabot bumps this SHA and names the tag it resolves to in the PR title, so read the version there # rather than trusting a hand-written one here (this comment claimed v1.11.0 through three bumps past it). - uses: huntridge-labs/argus/.github/workflows/reusable-security-hardening.yml@cc7ef8e7de85340368bf74e7c617e1a8f08ff5bb + uses: huntridge-labs/argus/.github/workflows/reusable-security-hardening.yml@6040db47e31f4db533967c3a5b70f4a208afead3 with: scanners: codeql,gitleaks,osv,dependency-review enable_code_security: true