ci(workflows): consume protected central dependency review after fail-closed owner repair - #654

Closed

seonghobae wants to merge 8 commits into

consolidate/dependency-review-reusable-workflow

Commits on Sep 2, 2026

ci(workflows): use central reusable dependency-review.yml

seonghobae
and
claude
committed
3841cca
test(ci): require immutable central dependency-review workflow
seonghobae
committed
a4838e8
fix(ci): pin reusable dependency review to protected source
seonghobae
committed
6fa119f
test(ci): preserve caller token permissions for reusable review
seonghobae
committed
d99b182
fix(ci): retain caller permissions for reusable dependency review
seonghobae
committed
db8b8ed
ci(workflows): re-pin to the SHA with harden-runner + comment_summary_in_pr

seonghobae
and
claude
committed
4369f50
fix(test): sync CENTRAL_DEPENDENCY_REVIEW_WORKFLOW_SHA with the pinned workflow SHA

seonghobae
and
claude
committed
2015ee1

Commits on Sep 3, 2026

ci(dependency-review): opt out of comment_summary_in_pr instead of

seonghobae
and
claude
committed
93c0de9