From 6e0a8e8e1cc1cea87c547d23cdcb98b554bff096 Mon Sep 17 00:00:00 2001 From: rabbitblood Date: Sun, 26 Apr 2026 15:44:31 -0700 Subject: [PATCH] =?UTF-8?q?docs(ci):=20fix=20secret-scan=20reusable=20work?= =?UTF-8?q?flow=20self-doc=20=E2=80=94=20repo=20is=20molecule-core,=20ref?= =?UTF-8?q?=20is=20@staging?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/secret-scan.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml index ff351015..74a5dac0 100644 --- a/.github/workflows/secret-scan.yml +++ b/.github/workflows/secret-scan.yml @@ -12,7 +12,11 @@ name: Secret scan # # jobs: # secret-scan: -# uses: Molecule-AI/molecule-monorepo/.github/workflows/secret-scan.yml@main +# uses: Molecule-AI/molecule-core/.github/workflows/secret-scan.yml@staging +# +# Pin to @staging not @main — staging is the active default branch, +# main lags via the staging-promotion workflow. Updates ride along +# automatically on the next consumer workflow run. # # Same regex set as the runtime's bundled pre-commit hook # (molecule-ai-workspace-runtime: molecule_runtime/scripts/pre-commit-checks.sh).