diff --git a/.github/workflows/proof-pr.yml b/.github/workflows/proof-pr.yml index 0d2e865..30ae7cd 100644 --- a/.github/workflows/proof-pr.yml +++ b/.github/workflows/proof-pr.yml @@ -9,10 +9,10 @@ permissions: jobs: proof: - uses: saagpatel/proof-pr/.github/workflows/proof-pr-receipt.yml@v0.2.10 + uses: saagpatel/proof-pr/.github/workflows/proof-pr-receipt.yml@v0.2.11 with: receipt_path: proof-pr.json - proof_pr_ref: v0.2.10 + proof_pr_ref: v0.2.11 check_public_git_metadata: true public_git_metadata_mode: introduced artifact_name: github-repo-auditor-proof-pr diff --git a/docs/proof-pr-dogfood.md b/docs/proof-pr-dogfood.md index 1d6cbd0..659d787 100644 --- a/docs/proof-pr-dogfood.md +++ b/docs/proof-pr-dogfood.md @@ -12,7 +12,7 @@ environment and render the proof block from a generated receipt: ```bash python3 -m venv /tmp/gra-proof-pr-venv /tmp/gra-proof-pr-venv/bin/python -m pip install \ - git+https://github.com/saagpatel/proof-pr.git@v0.2.10 + git+https://github.com/saagpatel/proof-pr.git@v0.2.11 /tmp/gra-proof-pr-venv/bin/proof-pr init \ --cwd . \ --tier T1 \ @@ -36,6 +36,7 @@ receipt patch, instead of the full hygiene report. It keeps hygiene read-only. The reusable workflow writes the normal hygiene report plus a focused public git metadata fix block to the GitHub job summary when that finding exists. If no focused fix is needed, the block prints a clean no-action-needed note. +Use `proof-pr examples` when choosing which receipt pattern to copy. For GithubRepoAuditor, keep the risk tier honest: