bomb.sh / tools
[READ-ONLY] Mirror of https://github.com/bombshell-dev/tools. Internal CLI to standardize tooling across all Bombshell projects
0
Fork 0

Configure Feed

Select the types of activity you want to include in your feed.

chore(ci): harden GitHub Actions (#36)

* chore(ci): harden github actions

* chore(ci): add dependabot

authored by

Nate Moore and committed by
GitHub (May 13, 2026, 9:16 PM EDT) bda59897 340e898f

+21 -6
+6
.github/dependabot.yml
··· 1 + version: 2 2 + updates: 3 + - package-ecosystem: github-actions 4 + directory: / 5 + schedule: 6 + interval: weekly
+6 -2
.github/workflows/format.yml
··· 6 6 branches: 7 7 - main 8 8 9 + permissions: {} 10 + 9 11 jobs: 10 12 format: 11 13 if: github.repository_owner == 'bombshell-dev' 12 - uses: bombshell-dev/automation/.github/workflows/format.yml@main 13 - secrets: inherit 14 + uses: bombshell-dev/automation/.github/workflows/format.yml@3a8b4a38fe464b0b51d14962ae416a169517fba9 # main as of 2026-05-13 15 + secrets: 16 + BOT_APP_ID: ${{ secrets.BOT_APP_ID }} 17 + BOT_PRIVATE_KEY: ${{ secrets.BOT_PRIVATE_KEY }} 14 18 permissions: 15 19 contents: write 16 20 pull-requests: write
+3 -2
.github/workflows/preview.yml
··· 4 4 workflow_dispatch: 5 5 pull_request: 6 6 7 + permissions: {} 8 + 7 9 jobs: 8 10 format: 9 11 if: github.repository_owner == 'bombshell-dev' 10 - uses: bombshell-dev/automation/.github/workflows/preview.yml@main 11 - secrets: inherit 12 + uses: bombshell-dev/automation/.github/workflows/preview.yml@3a8b4a38fe464b0b51d14962ae416a169517fba9 # main as of 2026-05-13 12 13 permissions: 13 14 contents: write 14 15 pull-requests: write
+6 -2
.github/workflows/publish.yaml .github/workflows/publish.yml
··· 6 6 branches: 7 7 - main 8 8 9 + permissions: {} 10 + 9 11 jobs: 10 12 publish: 11 13 if: github.repository_owner == 'bombshell-dev' 12 - uses: bombshell-dev/automation/.github/workflows/publish.yml@main 13 - secrets: inherit 14 + uses: bombshell-dev/automation/.github/workflows/publish.yml@3a8b4a38fe464b0b51d14962ae416a169517fba9 # main as of 2026-05-13 15 + secrets: 16 + BOT_APP_ID: ${{ secrets.BOT_APP_ID }} 17 + BOT_PRIVATE_KEY: ${{ secrets.BOT_PRIVATE_KEY }} 14 18 permissions: 15 19 contents: write 16 20 pull-requests: write