ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml from 0.5.0 to 0.6.0 by dependabot[bot] · Pull Request #167 · complytime/.github

dependabot · 2026-07-15T07:43:10Z

Bumps complytime/org-infra/.github/workflows/reusable_security.yml from 0.5.0 to 0.6.0.

Release notes

Sourced from complytime/org-infra/.github/workflows/reusable_security.yml's releases.

v0.6.0

org-infra 0.6.0

Central reusable GitHub Actions workflows, CI templates, compliance policy assets, and org sync tooling. Downstream repos usually consume this repo via workflow uses: pins or version tags.

Before you upgrade

Treat workflow YAML updates as potentially breaking for every consumer until you’ve reviewed them.

Use the Workflows & GitHub Actions section below for PRs that touched pipelines; for exact paths and hunks, open the compare link and narrow Files changed to .github/workflows/.

View full diff: v0.5.0 → v0.6.0

Changes

fix: adds support for tag overrides — #366 · @hbraswelrh

feat: enhance compliance scan with deferred failure and Gemara upload — #367 · @marcusburghardt

chore: migrate secrets scanner from gitleaks to betterleaks — #378 · @marcusburghardt

fix: add workflows permission to sync workflow app token — #379 · @marcusburghardt

feat: add centralized Renovate runner for Go toolchain patches — #357 · @marcusburghardt

docs: add Renovate integration hygiene fixes — #383 · @sonupreetam

fix(ci): add JSON validation guard to crapload workflow — #369 · @marcusburghardt

feat: add rich step summary with PR links to sync workflow — #380 · @marcusburghardt

feat: add source/test path inputs to reusable SonarCloud workflow — #386 · @yvonnedevlinrh

fix: add tag event metadata to container image workflow — #388 · @gvauter

feat(ci): add build-only mode to reusable_publish_ghcr.yml — #377 · @yvonnedevlinrh

feat(ci): add org-level linter config fallback to reusable CI workflow — #389 · @yvonnedevlinrh

fix: add per-linter vendor regex exclusion for PR mode — #402 · @yvonnedevlinrh

feat(vuln-scan): expose trivyignore file path input in reusable workflow — #405 · @yvonnedevlinrh

feat: convert issue templates from Markdown to YAML forms — #390 · @yvonnedevlinrh

chore: improve Renovate config with autodiscover and job summary — #409 · @marcusburghardt

docs: fix stale SYNC_APP_ID references in sync setup guide — #410 · @marcusburghardt

feat: add reusable release preflight and GoReleaser workflows — #394 · @marcusburghardt

fix(workflows): rename compliance artifact names for clarity — #411 · @marcusburghardt

chore: remove stale truthbeam references after collector-components#328 — #414 · @trevor-vaughan

Bug fixes

fix(ci): sanitize colons from compliance artifact filenames — #382 · @marcusburghardt

Maintenance

ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml from 0.4.0 to 0.5.0 — #368 · @dependabot[bot]

ci(deps): bump actions/attest from 4.1.0 to 4.1.1 — #374 · @dependabot[bot]

chore(deps): bump ruff from 0.15.18 to 0.15.20 — #371 · @dependabot[bot]

chore(deps): bump https://github.com/astral-sh/ruff-pre-commit from v0.15.18 to 0.15.20 — #372 · @dependabot[bot]

ci(deps): bump imjasonh/setup-crane from 0.6 to 0.7 — #375 · @dependabot[bot]

ci(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1 — #376 · @dependabot[bot]

ci(deps): bump oxsecurity/megalinter from 9.5.0 to 9.6.0 — #373 · @dependabot[bot]

... (truncated)

Commits

aff4817 chore(deps): bump https://github.com/astral-sh/ruff-pre-commit
a63ecfb chore(deps): bump gitpython from 3.1.50 to 3.1.51
2491c35 ci(deps): bump renovatebot/github-action from 46.1.18 to 46.1.19 (#420)
ad529b5 chore(deps): bump ruff from 0.15.20 to 0.15.21 (#417)
59bf6f7 ci(deps): bump oras-project/setup-oras from 2.0.0 to 2.0.1 (#421)
f7a11ff chore: remove stale truthbeam references after collector-components#328
bc06a92 ci(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0
29a38cd fix(workflows): rename compliance artifact names for clarity
c26d7dd fix: address PR #394 review feedback from @sonupreetam
4d4a0c1 fix(preflight): reject empty ci_checks array input
Additional commits viewable in compare view

github-actions · 2026-07-15T07:43:30Z

CRAP Load Analysis

No Go code changes detected in this PR. No CRAP impact.

github-actions · 2026-07-15T07:43:31Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion	Status	Detail
Dependencies Review	success	View logs
Calculated Risk	medium	`complytime/org-infra/.github/workflows/reusable_security.yml` v0.6.0
Release Age	20h	Released 20 hours ago
Dependency Usage	4 repos	Informational only — does not affect approval

Auto-approval: ⏳ Manual review required

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

marcusburghardt

LGTM

…ty.yml Bumps [complytime/org-infra/.github/workflows/reusable_security.yml](https://github.com/complytime/org-infra) from 0.5.0 to 0.6.0. - [Release notes](https://github.com/complytime/org-infra/releases) - [Changelog](https://github.com/complytime/org-infra/blob/main/CHANGELOG.md) - [Commits](complytime/org-infra@638b203...aff4817) --- updated-dependencies: - dependency-name: complytime/org-infra/.github/workflows/reusable_security.yml dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions

Automatically approved: risk=medium, review=success, release_age=45h.

github-actions · 2026-07-16T07:51:20Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion	Status	Detail
Dependencies Review	success	View logs
Calculated Risk	medium	`complytime/org-infra/.github/workflows/reusable_security.yml` v0.6.0
Release Age	45h	Released 45 hours ago
Dependency Usage	unavailable	Informational only — does not affect approval

Auto-approval: ✅ Approved

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

github-actions · 2026-07-16T07:53:04Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion	Status	Detail
Dependencies Review	success	View logs
Calculated Risk	medium	`complytime/org-infra/.github/workflows/reusable_security.yml` v0.6.0
Release Age	45h	Released 45 hours ago
Dependency Usage	unavailable	Informational only — does not affect approval

Auto-approval: ✅ Approved

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

github-actions

Automatically approved: risk=medium, review=success, release_age=45h.

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 15, 2026

dependabot Bot requested review from jflowers, jpower432 and marcusburghardt as code owners July 15, 2026 07:43

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 15, 2026

marcusburghardt approved these changes Jul 16, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_security.yml-0.6.0 branch from 82c25ea to 7e756d1 Compare July 16, 2026 07:49

dependabot Bot force-pushed the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_security.yml-0.6.0 branch from 7e756d1 to 09ce615 Compare July 16, 2026 07:51

github-actions Bot approved these changes Jul 16, 2026

View reviewed changes

marcusburghardt merged commit dadc876 into main Jul 16, 2026
13 checks passed

marcusburghardt deleted the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_security.yml-0.6.0 branch July 16, 2026 07:53

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml from 0.5.0 to 0.6.0#167

ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml from 0.5.0 to 0.6.0#167
marcusburghardt merged 1 commit into
mainfrom
dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_security.yml-0.6.0

dependabot Bot commented on behalf of github Jul 15, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 15, 2026

Uh oh!

github-actions Bot commented Jul 15, 2026

Uh oh!

marcusburghardt left a comment

Uh oh!

github-actions Bot left a comment

Uh oh!

github-actions Bot commented Jul 16, 2026

Uh oh!

github-actions Bot commented Jul 16, 2026

Uh oh!

github-actions Bot left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.6.0

org-infra 0.6.0

Before you upgrade

Changes

Bug fixes

Maintenance

Uh oh!

github-actions Bot commented Jul 15, 2026

CRAP Load Analysis

Uh oh!

github-actions Bot commented Jul 15, 2026

Uh oh!

marcusburghardt left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jul 16, 2026

Uh oh!

github-actions Bot commented Jul 16, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 15, 2026 •

edited

Loading