From f6ddd81a88224ee4df9c57be9f20088aa9bd99d8 Mon Sep 17 00:00:00 2001 From: Javier Garcia Vera Date: Wed, 21 Oct 2026 16:48:29 +0200 Subject: [PATCH 1/3] chore: add Wiz sensor step to GitHub Actions jobs Adds a gated, fail-open Wiz runner sensor step as the first step of Linux GitHub-hosted jobs. It is a no-op until WIZ_SENSOR_ENABLED is true. INFRA-4215 Co-Authored-By: Claude --- .github/workflows/lintcheck.yaml | 5 +++++ .github/workflows/unity-build.yml | 10 ++++++++++ .github/workflows/validate-examples.yml | 5 +++++ 3 files changed, 20 insertions(+) diff --git a/.github/workflows/lintcheck.yaml b/.github/workflows/lintcheck.yaml index bab275c..a3a5093 100644 --- a/.github/workflows/lintcheck.yaml +++ b/.github/workflows/lintcheck.yaml @@ -6,6 +6,11 @@ jobs: markdown-link-check: runs-on: ubuntu-latest steps: + - name: Wiz sensor + uses: Web3Auth/.github/.github/actions/wiz-sensor@2f62f5725c0aa2bbdf6ad947dbe589d44665f58c # feat/wiz-sensor-action + with: + enabled: ${{ vars.WIZ_SENSOR_ENABLED }} + token: ${{ secrets.WIZ_SENSOR_TOKEN }} - uses: actions/checkout@v4 - uses: gaurav-nelson/github-action-markdown-link-check@v1 with: diff --git a/.github/workflows/unity-build.yml b/.github/workflows/unity-build.yml index 4a2f84f..0766d13 100644 --- a/.github/workflows/unity-build.yml +++ b/.github/workflows/unity-build.yml @@ -14,6 +14,11 @@ jobs: outputs: available: ${{ steps.check.outputs.available }} steps: + - name: Wiz sensor + uses: Web3Auth/.github/.github/actions/wiz-sensor@2f62f5725c0aa2bbdf6ad947dbe589d44665f58c # feat/wiz-sensor-action + with: + enabled: ${{ vars.WIZ_SENSOR_ENABLED }} + token: ${{ secrets.WIZ_SENSOR_TOKEN }} - name: Detect license secrets id: check env: @@ -41,6 +46,11 @@ jobs: - unity-auth0-example - unity-aggregate-verifier-example steps: + - name: Wiz sensor + uses: Web3Auth/.github/.github/actions/wiz-sensor@2f62f5725c0aa2bbdf6ad947dbe589d44665f58c # feat/wiz-sensor-action + with: + enabled: ${{ vars.WIZ_SENSOR_ENABLED }} + token: ${{ secrets.WIZ_SENSOR_TOKEN }} - name: Checkout repository uses: actions/checkout@v4 with: diff --git a/.github/workflows/validate-examples.yml b/.github/workflows/validate-examples.yml index d17d3fd..c909542 100644 --- a/.github/workflows/validate-examples.yml +++ b/.github/workflows/validate-examples.yml @@ -11,6 +11,11 @@ jobs: name: Validate example projects runs-on: ubuntu-latest steps: + - name: Wiz sensor + uses: Web3Auth/.github/.github/actions/wiz-sensor@2f62f5725c0aa2bbdf6ad947dbe589d44665f58c # feat/wiz-sensor-action + with: + enabled: ${{ vars.WIZ_SENSOR_ENABLED }} + token: ${{ secrets.WIZ_SENSOR_TOKEN }} - name: Checkout repository uses: actions/checkout@v4 From b2b16aed746bfb0a338ff8e8670e69ff21106d5b Mon Sep 17 00:00:00 2001 From: Javier Garcia Vera Date: Wed, 21 Oct 2026 17:32:54 +0200 Subject: [PATCH 2/3] chore: pin Wiz sensor action to v1.0.0 Pin to the merge commit of Web3Auth/.github#5. INFRA-4215 Co-Authored-By: Claude --- .github/workflows/lintcheck.yaml | 2 +- .github/workflows/unity-build.yml | 4 ++-- .github/workflows/validate-examples.yml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/lintcheck.yaml b/.github/workflows/lintcheck.yaml index a3a5093..8de5bc5 100644 --- a/.github/workflows/lintcheck.yaml +++ b/.github/workflows/lintcheck.yaml @@ -7,7 +7,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Wiz sensor - uses: Web3Auth/.github/.github/actions/wiz-sensor@2f62f5725c0aa2bbdf6ad947dbe589d44665f58c # feat/wiz-sensor-action + uses: Web3Auth/.github/.github/actions/wiz-sensor@545f7c255313f85d38a02dc36c4ad01387d03149 # v1.0.0 with: enabled: ${{ vars.WIZ_SENSOR_ENABLED }} token: ${{ secrets.WIZ_SENSOR_TOKEN }} diff --git a/.github/workflows/unity-build.yml b/.github/workflows/unity-build.yml index 0766d13..987cc87 100644 --- a/.github/workflows/unity-build.yml +++ b/.github/workflows/unity-build.yml @@ -15,7 +15,7 @@ jobs: available: ${{ steps.check.outputs.available }} steps: - name: Wiz sensor - uses: Web3Auth/.github/.github/actions/wiz-sensor@2f62f5725c0aa2bbdf6ad947dbe589d44665f58c # feat/wiz-sensor-action + uses: Web3Auth/.github/.github/actions/wiz-sensor@545f7c255313f85d38a02dc36c4ad01387d03149 # v1.0.0 with: enabled: ${{ vars.WIZ_SENSOR_ENABLED }} token: ${{ secrets.WIZ_SENSOR_TOKEN }} @@ -47,7 +47,7 @@ jobs: - unity-aggregate-verifier-example steps: - name: Wiz sensor - uses: Web3Auth/.github/.github/actions/wiz-sensor@2f62f5725c0aa2bbdf6ad947dbe589d44665f58c # feat/wiz-sensor-action + uses: Web3Auth/.github/.github/actions/wiz-sensor@545f7c255313f85d38a02dc36c4ad01387d03149 # v1.0.0 with: enabled: ${{ vars.WIZ_SENSOR_ENABLED }} token: ${{ secrets.WIZ_SENSOR_TOKEN }} diff --git a/.github/workflows/validate-examples.yml b/.github/workflows/validate-examples.yml index c909542..c7ed6f3 100644 --- a/.github/workflows/validate-examples.yml +++ b/.github/workflows/validate-examples.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Wiz sensor - uses: Web3Auth/.github/.github/actions/wiz-sensor@2f62f5725c0aa2bbdf6ad947dbe589d44665f58c # feat/wiz-sensor-action + uses: Web3Auth/.github/.github/actions/wiz-sensor@545f7c255313f85d38a02dc36c4ad01387d03149 # v1.0.0 with: enabled: ${{ vars.WIZ_SENSOR_ENABLED }} token: ${{ secrets.WIZ_SENSOR_TOKEN }} From 335b4de79ca7334f16c2355a91e2f91c03f3998f Mon Sep 17 00:00:00 2001 From: Javier Garcia Vera Date: Thu, 22 Oct 2026 15:43:51 +0200 Subject: [PATCH 3/3] chore: trigger CI for Wiz sensor step Empty commit to trigger workflows. INFRA-4215 Co-Authored-By: Claude