From 24b21e8ca7a17a4e1d96578efa9fc2698583a752 Mon Sep 17 00:00:00 2001 From: Frank O'Hara Date: Thu, 27 Aug 2026 19:12:42 -0600 Subject: [PATCH] =?UTF-8?q?ci:=20pin=20flawd=20v0.15.0=20=E2=80=94=20cover?= =?UTF-8?q?age=5Fsource=20lands,=20so=20the=20[docker]=20image=20posture?= =?UTF-8?q?=20takes=20effect?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit v0.14.0 silently ignored the [docker] coverage_source = "image" key this repo's flawd.toml sets (the key shipped in v0.15.0), so container coverage on the scheduled Docker audits was still bind-mount sourced — the wrong-architecture-binaries hazard the key exists to close. v0.15.0 honors it; release notes: https://github.com/fixture-dev/flawd-releases/releases/tag/v0.15.0 --- .github/workflows/mutation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/mutation.yml b/.github/workflows/mutation.yml index a7fa8dd..21a3d7e 100644 --- a/.github/workflows/mutation.yml +++ b/.github/workflows/mutation.yml @@ -20,7 +20,7 @@ permissions: security-events: write # SARIF upload to code scanning env: - FLAWD_VERSION: v0.14.0 # pinned; bump deliberately + FLAWD_VERSION: v0.15.0 # pinned; bump deliberately jobs: mutation: