From cfcca4147dddc14928983350be8f481f9e57a960 Mon Sep 17 00:00:00 2001 From: Ulzii Otgonbaatar Date: Mon, 4 May 2026 14:36:21 -0600 Subject: [PATCH 1/2] ci: add centralized vuln remediation workflow Co-authored-by: Cursor --- .github/workflows/vuln-remediation.yml | 17 +++++++++++++++++ socket.yml | 1 + 2 files changed, 18 insertions(+) create mode 100644 .github/workflows/vuln-remediation.yml create mode 100644 socket.yml diff --git a/.github/workflows/vuln-remediation.yml b/.github/workflows/vuln-remediation.yml new file mode 100644 index 0000000..b2994ff --- /dev/null +++ b/.github/workflows/vuln-remediation.yml @@ -0,0 +1,17 @@ +name: Vulnerability Remediation + +on: + schedule: + - cron: '0 3 * * 3' + workflow_dispatch: + +permissions: + contents: write + pull-requests: write + +jobs: + remediate: + uses: kernel/security-workflows/.github/workflows/vuln-remediation.yml@main + with: + setup-bun: true + secrets: inherit diff --git a/socket.yml b/socket.yml new file mode 100644 index 0000000..22817d2 --- /dev/null +++ b/socket.yml @@ -0,0 +1 @@ +version: 2 From 48c75c6d157c05d9bd92ca9294efb89f81c65ada Mon Sep 17 00:00:00 2001 From: Ulzii Otgonbaatar Date: Tue, 12 May 2026 10:57:06 -0600 Subject: [PATCH 2/2] =?UTF-8?q?fix:=20remove=20incorrect=20setup-bun=20inp?= =?UTF-8?q?ut=20=E2=80=94=20project=20uses=20yarn?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Cursor --- .github/workflows/vuln-remediation.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/vuln-remediation.yml b/.github/workflows/vuln-remediation.yml index b2994ff..e7b1ea9 100644 --- a/.github/workflows/vuln-remediation.yml +++ b/.github/workflows/vuln-remediation.yml @@ -12,6 +12,4 @@ permissions: jobs: remediate: uses: kernel/security-workflows/.github/workflows/vuln-remediation.yml@main - with: - setup-bun: true secrets: inherit