From 022b24d5962a71b65388c4f550b25ea39addf8f5 Mon Sep 17 00:00:00 2001 From: Altay Date: Fri, 11 Sep 2026 22:01:42 +0300 Subject: [PATCH] docs(scan): state the history behaviour in every caller --- .github/workflows/scan.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml index 962bc60..d206bad 100644 --- a/.github/workflows/scan.yml +++ b/.github/workflows/scan.yml @@ -1,7 +1,9 @@ name: Scan # No push trigger: the push-to-main pipeline already runs the same shared -# scan as a release gate. +# scan as a release gate. Pull requests scan the full history too, because the +# shared baseline checks out with `fetch-depth: 0`; the weekly schedule +# re-scans unchanged code against newer detector rules. on: pull_request: schedule: @@ -19,5 +21,6 @@ jobs: permissions: contents: read # Tracks main by design: baseline changes reach every adopter without a - # pin bump per repository, and Renovate does not update this reference. + # pin bump per repository. The shared Renovate preset deliberately disables + # updates for `uinaf/.github`, so a pin here would never move again. uses: uinaf/.github/.github/workflows/scan.yml@main