From eaaa751da78a82d917dcf1f22225427dabfb08f3 Mon Sep 17 00:00:00 2001 From: Rafid Aslam Date: Wed, 9 Sep 2026 18:38:33 +0700 Subject: [PATCH] docs: pin the GitHub Action at v2.1.1 Every snippet showed @v2, which installs py-tirith 1.2.0. v2.1.1 installs 1.2.1, whose comment renders the planned changes as a diff block above the findings -- in both modes, after v2.1.0 shipped it for the platform path only. The action pins its CLI to an exact tag so one action ref means one known CLI, so @v2 will not drift on its own and anyone copying these snippets stays on 1.2.0 until we move them. Ten references, one substitution: README, the landing page, the demo phases, the CI integration page, and the two agent-facing packs, which would otherwise hand an agent a stale pin. static/llms-full.txt and static/docs/ regenerated with documentation/scripts/generate-llms-full.py rather than edited. Closes https://github.com/StackGuardian/tirith/issues/373 --- .claude/skills/tirith-policies/reference/pipelines.md | 2 +- .cursor/rules/tirith-policies.mdc | 2 +- README.md | 2 +- documentation/docs/tirith-usage/ci-integration.md | 2 +- documentation/src/data/demoPhases.js | 10 +++++----- documentation/src/pages/index.js | 2 +- .../static/docs/tirith-usage/ci-integration.md | 2 +- documentation/static/llms-full.txt | 2 +- 8 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.claude/skills/tirith-policies/reference/pipelines.md b/.claude/skills/tirith-policies/reference/pipelines.md index f118c995..91335912 100644 --- a/.claude/skills/tirith-policies/reference/pipelines.md +++ b/.claude/skills/tirith-policies/reference/pipelines.md @@ -51,7 +51,7 @@ steps: - uses: actions/checkout@v4 - run: terraform plan -out=tfplan -input=false - - uses: StackGuardian/tirith-iac-governance-action@v2 + - uses: StackGuardian/tirith-iac-governance-action@v2.1.1 with: plan-file: tfplan fail-on-error: true diff --git a/.cursor/rules/tirith-policies.mdc b/.cursor/rules/tirith-policies.mdc index 120d4676..32c51823 100644 --- a/.cursor/rules/tirith-policies.mdc +++ b/.cursor/rules/tirith-policies.mdc @@ -89,7 +89,7 @@ steps: - run: | terraform plan -out=tfplan -input=false terraform show -json tfplan > plan.json - - uses: StackGuardian/tirith-iac-governance-action@v2 + - uses: StackGuardian/tirith-iac-governance-action@v2.1.1 with: {fail-on-error: true} ``` diff --git a/README.md b/README.md index 72b798c4..497318b9 100644 --- a/README.md +++ b/README.md @@ -405,7 +405,7 @@ code: ```yaml - run: terraform show -json tfplan > plan.json -- uses: StackGuardian/tirith-iac-governance-action@v2 +- uses: StackGuardian/tirith-iac-governance-action@v2.1.1 ``` With a `plan.json` in the working directory that is the whole integration — no `with:` block. Add diff --git a/documentation/docs/tirith-usage/ci-integration.md b/documentation/docs/tirith-usage/ci-integration.md index b3ad36c8..ede2504a 100644 --- a/documentation/docs/tirith-usage/ci-integration.md +++ b/documentation/docs/tirith-usage/ci-integration.md @@ -47,7 +47,7 @@ steps: terraform plan -out=tfplan -input=false terraform show -json tfplan > plan.json - - uses: StackGuardian/tirith-iac-governance-action@v2 + - uses: StackGuardian/tirith-iac-governance-action@v2.1.1 ``` With a `plan.json` in the working directory that is the whole integration — no `with:` block. The diff --git a/documentation/src/data/demoPhases.js b/documentation/src/data/demoPhases.js index 8f960070..a4e77411 100644 --- a/documentation/src/data/demoPhases.js +++ b/documentation/src/data/demoPhases.js @@ -25,7 +25,7 @@ export const DEMO_PHASES = [ checks: write - run: terraform show -json tfplan > plan.json -- uses: StackGuardian/tirith-iac-governance-action@v2 +- uses: StackGuardian/tirith-iac-governance-action@v2.1.1 with: fail-on-error: true`, outcome: { @@ -54,7 +54,7 @@ export const DEMO_PHASES = [ 'files are removed.', delta: '4 files · +5 −77', tag: 'Optional platform', - code: `- uses: StackGuardian/tirith-iac-governance-action@v2 + code: `- uses: StackGuardian/tirith-iac-governance-action@v2.1.1 with: sg-api-key: \${{ secrets.SG_API_TOKEN }} sg-org: \${{ vars.SG_ORG }} @@ -154,7 +154,7 @@ export const DEMO_PHASES = [ tag: 'Post-apply', code: `- run: terraform show -json > state.json -- uses: StackGuardian/tirith-iac-governance-action@v2 +- uses: StackGuardian/tirith-iac-governance-action@v2.1.1 continue-on-error: true with: input-path: state.json @@ -212,7 +212,7 @@ export const PIPELINE_TARGETS = [ steps: - run: terraform plan -out=tfplan -input=false - - uses: StackGuardian/tirith-iac-governance-action@v2 + - uses: StackGuardian/tirith-iac-governance-action@v2.1.1 with: plan-file: tfplan fail-on-error: true`, @@ -304,7 +304,7 @@ export const DEMO_REPOS = [ steps: - run: terraform show -json tfplan > plan.json - - uses: StackGuardian/tirith-iac-governance-action@v2 + - uses: StackGuardian/tirith-iac-governance-action@v2.1.1 with: fail-on-error: true`, }, diff --git a/documentation/src/pages/index.js b/documentation/src/pages/index.js index 33ae78c3..a6623288 100644 --- a/documentation/src/pages/index.js +++ b/documentation/src/pages/index.js @@ -130,7 +130,7 @@ const hero = { */ command: `- run: terraform plan -out=tfplan -input=false -- uses: StackGuardian/tirith-iac-governance-action@v2 +- uses: StackGuardian/tirith-iac-governance-action@v2.1.1 with: plan-file: tfplan fail-on-error: true`, diff --git a/documentation/static/docs/tirith-usage/ci-integration.md b/documentation/static/docs/tirith-usage/ci-integration.md index b15a23f4..7c713402 100644 --- a/documentation/static/docs/tirith-usage/ci-integration.md +++ b/documentation/static/docs/tirith-usage/ci-integration.md @@ -35,7 +35,7 @@ steps: terraform plan -out=tfplan -input=false terraform show -json tfplan > plan.json - - uses: StackGuardian/tirith-iac-governance-action@v2 + - uses: StackGuardian/tirith-iac-governance-action@v2.1.1 ``` With a `plan.json` in the working directory that is the whole integration — no `with:` block. The diff --git a/documentation/static/llms-full.txt b/documentation/static/llms-full.txt index f6e7291d..c07bd870 100644 --- a/documentation/static/llms-full.txt +++ b/documentation/static/llms-full.txt @@ -2910,7 +2910,7 @@ steps: terraform plan -out=tfplan -input=false terraform show -json tfplan > plan.json - - uses: StackGuardian/tirith-iac-governance-action@v2 + - uses: StackGuardian/tirith-iac-governance-action@v2.1.1 ``` With a `plan.json` in the working directory that is the whole integration — no `with:` block. The