From 290f7f7ae79095dce1e90bad34089161ef910eba Mon Sep 17 00:00:00 2001 From: Olivier Gorzalka Date: Wed, 28 Oct 2026 17:13:38 +0100 Subject: [PATCH 1/2] ci: use the harness 0.1.12 template workflow --- .github/workflows/harness.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/harness.yml b/.github/workflows/harness.yml index cab7484..11ce457 100644 --- a/.github/workflows/harness.yml +++ b/.github/workflows/harness.yml @@ -10,9 +10,8 @@ permissions: {} jobs: harness: - uses: Pollora/harness/.github/workflows/template.yml@v0.1.11 + uses: Pollora/harness/.github/workflows/template.yml@v0.1.12 with: mode: enforce - observed: security permissions: contents: read From 387c3ec8bb7de03767ea1288350fb413bf80610f Mon Sep 17 00:00:00 2001 From: Olivier Gorzalka Date: Wed, 28 Oct 2026 17:20:11 +0100 Subject: [PATCH 2/2] ci: keep the security gate observed until three core functions are reviewed --- .github/workflows/harness.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/harness.yml b/.github/workflows/harness.yml index 11ce457..3e7182a 100644 --- a/.github/workflows/harness.yml +++ b/.github/workflows/harness.yml @@ -13,5 +13,6 @@ jobs: uses: Pollora/harness/.github/workflows/template.yml@v0.1.12 with: mode: enforce + observed: security permissions: contents: read