Skip to content

Update Socket Basics job call path - #5

Merged
sgrammargs merged 2 commits into
masterfrom
remove-legacy-socket-basics-config
Sep 3, 2026
Merged

sgrammargs merged 2 commits into
masterfrom
remove-legacy-socket-basics-config

Conversation

@sgrammargs

@sgrammargs sgrammargs commented Sep 1, 2026 •

Copy link
Copy Markdown

Migrates this repo's Socket Basics CI scan to the new public/private split — a public repo for the scanning mechanism, a private repo for configuration specs.

Changes to .github/workflows/socket-basics.yml:

  • uses: now points to ynab/ynab-sast-scanner/.github/workflows/socket-basics.yml@main
  • Added the SAST_SUPPRESSIONS_APP_PRIVATE_KEY secret

Points the CI workflow at ynab-sast-scanner instead of shared-actions, adds the
new App-token secret, and removes the legacy shared-actions caller comment.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@sgrammargs
sgrammargs marked this pull request as ready for review September 1, 2026 17:13
@sgrammargs
sgrammargs requested a review from grantcox September 1, 2026 17:35
Per Grant's review feedback, matching evergreen#30007.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@sgrammargs
sgrammargs requested a review from Dimezis September 3, 2026 15:46
@sgrammargs
sgrammargs merged commit 7b955d3 into master Sep 3, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants