From e49b04f92d048076d917de0274d2b37759edac4b Mon Sep 17 00:00:00 2001 From: Ulzii Otgonbaatar Date: Mon, 4 May 2026 12:03:55 -0600 Subject: [PATCH 1/2] ci: test vuln remediation with Python support Co-authored-by: Cursor --- .github/workflows/vuln-remediation.yml | 22 ++++++++++++++++++++++ socket.yml | 1 + 2 files changed, 23 insertions(+) create mode 100644 .github/workflows/vuln-remediation.yml create mode 100644 socket.yml diff --git a/.github/workflows/vuln-remediation.yml b/.github/workflows/vuln-remediation.yml new file mode 100644 index 0000000..170baff --- /dev/null +++ b/.github/workflows/vuln-remediation.yml @@ -0,0 +1,22 @@ +name: Vulnerability Remediation + +on: + schedule: + - cron: '0 3 * * 3' + workflow_dispatch: + pull_request: + branches: [main] + paths: + - '.github/workflows/vuln-remediation*' + +permissions: + contents: write + pull-requests: write + +jobs: + remediate: + uses: kernel/security-workflows/.github/workflows/vuln-remediation.yml@main + with: + setup-python: true + python-version: '3.11' + secrets: inherit diff --git a/socket.yml b/socket.yml new file mode 100644 index 0000000..22817d2 --- /dev/null +++ b/socket.yml @@ -0,0 +1 @@ +version: 2 From 784f10e84f091f73dc2364062e2969c2e7c8fc52 Mon Sep 17 00:00:00 2001 From: Ulzii Otgonbaatar Date: Mon, 4 May 2026 12:32:20 -0600 Subject: [PATCH 2/2] ci: remove test trigger after successful e2e validation Co-authored-by: Cursor --- .github/workflows/vuln-remediation.yml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/.github/workflows/vuln-remediation.yml b/.github/workflows/vuln-remediation.yml index 170baff..07d8f36 100644 --- a/.github/workflows/vuln-remediation.yml +++ b/.github/workflows/vuln-remediation.yml @@ -4,10 +4,6 @@ on: schedule: - cron: '0 3 * * 3' workflow_dispatch: - pull_request: - branches: [main] - paths: - - '.github/workflows/vuln-remediation*' permissions: contents: write