Skip to content

ci: use centralized vuln remediation workflow from infra #206

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ulziibay-kernel merged 8 commits into from
May 12, 2026
+22 −0
Merged

ci: use centralized vuln remediation workflow from infra #206

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
f48d645
ci: use centralized vuln remediation workflow from infra
ulziibay-kernel Apr 9, 2026
c5cfb26
ci: replace custom config with socket.yml
ulziibay-kernel Apr 9, 2026
1845777
ci: temporarily point at infra PR branch for e2e testing
ulziibay-kernel Apr 9, 2026
0b5bcf5
ci: retrigger workflow after enabling org-wide reusable access on infra
ulziibay-kernel Apr 9, 2026
3754406
ci: revert caller to @main after successful e2e test
ulziibay-kernel Apr 10, 2026
80546a7
ci: point vuln remediation at kernel/security-workflows
ulziibay-kernel Apr 10, 2026
eefa273
ci: update vuln remediation caller with Python support and security-w…
ulziibay-kernel May 4, 2026
66c4c45
Merge branch 'main' into security/vuln-remediation-reusable
ulziibay-kernel May 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 18 additions & 0 deletions .github/workflows/vuln-remediation.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
name: Vulnerability Remediation

on:
schedule:
- cron: '0 3 * * 3'
workflow_dispatch:

permissions:
contents: write
pull-requests: write

jobs:
remediate:
uses: kernel/security-workflows/.github/workflows/vuln-remediation.yml@main
with:
go-version-file: 'server/go.mod'
setup-python: true
secrets: inherit
Comment thread
cursor[bot] marked this conversation as resolved.
Comment thread
ulziibay-kernel marked this conversation as resolved.
4 changes: 4 additions & 0 deletions socket.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
version: 2
projectIgnorePaths:
- "shared/cdp-test/"
- "images/chromium-headful/client/"
Loading