Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 17 additions & 0 deletions .github/workflows/sdk-parity-dispatch.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
name: SDK Parity Dispatch

on:
push:
paths:
- "src/**"
- "Cargo.toml"
pull_request:
paths:
- "src/**"
- "Cargo.toml"
workflow_dispatch:

jobs:
parity-dispatch:
uses: tapsilat/tapsilat-sdk-parity/.github/workflows/reusable-sdk-parity-dispatch.yml@main
Comment on lines +15 to +16
Copy link

Copilot AI Apr 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The called reusable workflow is referenced via @main, which is mutable and makes runs non-reproducible and increases supply-chain risk. Pin this to an immutable ref (tag or commit SHA) and update intentionally when you want new behavior.

Copilot uses AI. Check for mistakes.
secrets: inherit
Comment on lines +16 to +17
Copy link

Copilot AI Apr 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

secrets: inherit passes all repository/environment secrets into an externally-defined reusable workflow. To reduce accidental secret exposure, pass only the specific secrets the reusable workflow needs (and consider setting explicit minimal permissions for the job/workflow as well).

Copilot uses AI. Check for mistakes.
Loading