diff --git a/.github/workflows/proof-pr.yml b/.github/workflows/proof-pr.yml index 37c8086..0d2e865 100644 --- a/.github/workflows/proof-pr.yml +++ b/.github/workflows/proof-pr.yml @@ -9,10 +9,10 @@ permissions: jobs: proof: - uses: saagpatel/proof-pr/.github/workflows/proof-pr-receipt.yml@v0.2.9 + uses: saagpatel/proof-pr/.github/workflows/proof-pr-receipt.yml@v0.2.10 with: receipt_path: proof-pr.json - proof_pr_ref: v0.2.9 + proof_pr_ref: v0.2.10 check_public_git_metadata: true public_git_metadata_mode: introduced artifact_name: github-repo-auditor-proof-pr diff --git a/docs/proof-pr-dogfood.md b/docs/proof-pr-dogfood.md index b6dfacc..1d6cbd0 100644 --- a/docs/proof-pr-dogfood.md +++ b/docs/proof-pr-dogfood.md @@ -12,7 +12,7 @@ environment and render the proof block from a generated receipt: ```bash python3 -m venv /tmp/gra-proof-pr-venv /tmp/gra-proof-pr-venv/bin/python -m pip install \ - git+https://github.com/saagpatel/proof-pr.git@v0.2.9 + git+https://github.com/saagpatel/proof-pr.git@v0.2.10 /tmp/gra-proof-pr-venv/bin/proof-pr init \ --cwd . \ --tier T1 \ @@ -35,6 +35,7 @@ Add `--check --fix-only` when you want just one copyable command and compac receipt patch, instead of the full hygiene report. It keeps hygiene read-only. The reusable workflow writes the normal hygiene report plus a focused public git metadata fix block to the GitHub job summary when that finding exists. +If no focused fix is needed, the block prints a clean no-action-needed note. For GithubRepoAuditor, keep the risk tier honest: