From 72f8a702adc6f4d262cc7b75f0fdcb9fd395023b Mon Sep 17 00:00:00 2001 From: John Cunningham Date: Wed, 27 May 2026 22:23:48 -0700 Subject: [PATCH] ci: pass target_branch through security-update caller workflow Add target_branch dispatch input and forward it to the reusable workflow in sec-tools-public, enabling security update PRs to target release branches. SPO-979 Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/workflows/security-update-claude.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/security-update-claude.yml b/.github/workflows/security-update-claude.yml index ca28e40..f9340b6 100644 --- a/.github/workflows/security-update-claude.yml +++ b/.github/workflows/security-update-claude.yml @@ -27,6 +27,10 @@ on: required: false type: string default: "security-team" + target_branch: + description: 'Target branch for checkout and PR base (default: dispatch ref)' + required: false + type: string permissions: contents: write @@ -41,6 +45,7 @@ jobs: linear_tickets: ${{ inputs.linear_tickets }} batch_id: ${{ inputs.batch_id }} reviewers: ${{ inputs.reviewers }} + target_branch: ${{ inputs.target_branch }} secrets: ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }} GH_TOKEN_SECURITY_PATCHES: ${{ secrets.GH_TOKEN_SECURITY_PATCHES }}