rickub/cli · 59285c9

⑂ 59285c9

security workflow: use a verbatim concurrency groupUnverified

rickub resolves every concurrency group that mentions github.ref to the
bare ref, so security-${{ github.ref }} and ci.yml's ci-${{ github.ref }}
became one group and the Security run cancelled CI #15 on the same push.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FgkcT3UPxwxukBKojB5eg4

Olivier Girardot committed 2026-09-03T08:04:21+02:00 Browse files

59285c9 parent: b7e1d1f

modified .github/workflows/security.yml +5 -1 Viewed

@@ -19,8 +19,12 @@ on:
19	19	permissions:
20	20	contents: read
21	21
	22	+# A verbatim group, not security-${{ github.ref }}: rickub resolves ANY group
	23	+# that mentions github.ref to the bare ref, so ci.yml's "ci-${{ github.ref }}"
	24	+# and this one would collapse into the same group and cancel each other on
	25	+# every push (that is how CI run #15 died). "security" is unique in this repo.
22	26	concurrency:
23		- group: security-${{ github.ref }}
	27	+ group: security
24	28	cancel-in-progress: true
25	29
26	30	# Scanner versions are pinned; bumping one is a reviewed change, not a surprise.

  permissions:
    contents: read
++# A verbatim group, not security-${{ github.ref }}: rickub resolves ANY group
++# that mentions github.ref to the bare ref, so ci.yml's "ci-${{ github.ref }}"
++# and this one would collapse into the same group and cancel each other on
++# every push (that is how CI run #15 died). "security" is unique in this repo.
  concurrency:
--  group: security-${{ github.ref }}
++  group: security
    cancel-in-progress: true
  # Scanner versions are pinned; bumping one is a reviewed change, not a surprise.