From 9f24b569963a06ac14079cd92a15782596d858db Mon Sep 17 00:00:00 2001 From: abrichr Date: Wed, 19 Aug 2026 14:37:48 -0400 Subject: [PATCH] ci: run pull-request checks on every base branch PR #78 targets codex/promote-capture-beta, so the branches: [main] filter on pull_request matched almost nothing. The pull request reports mergeStateStatus CLEAN with 1 check instead of the full set, which makes an unverified change look the same as a passing one. Remove the base-branch filter from the three pull_request triggers. The push trigger keeps branches: [main]. Co-Authored-By: Claude Opus 5 --- .github/workflows/codeql.yml | 1 - .github/workflows/dependency-review.yml | 1 - .github/workflows/test.yml | 1 - 3 files changed, 3 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 4f82b17..beb340f 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -5,7 +5,6 @@ on: push: branches: [main] pull_request: - branches: [main] schedule: - cron: "23 5 * * 1" diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 5f615da..a44f77b 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -3,7 +3,6 @@ name: Dependency Review # SOC 2: dependency-review (OA-C-24). Flags vulnerable/denied deps on PRs. on: pull_request: - branches: [main] permissions: contents: read diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 6efaf92..01d5e56 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -4,7 +4,6 @@ on: push: branches: [main] pull_request: - branches: [main] concurrency: group: capture-tests-${{ github.ref }}