Skip to content
cis-controls

Upstream watch (upstream-watch.yaml)

Servicereferenceworkflows/upstream-watch

Nobody has checked this yet

still a draft

Written 2026-10-30 by ktl-librarian (automation).

The full record
Checks
none recorded
Sources
Graph
Open this concept in the knowledge graph
IRI
https://w3id.org/lmodel/cis-controls/knowledge/workflows/upstream-watch
Licence
CC BY 4.0
Files
MarkdownJSON-LDSource on GitHubHistory on GitHub

Upstream watch (upstream-watch.yaml)

Section titled “Upstream watch (upstream-watch.yaml)”

.github/workflows/upstream-watch.yaml is the workflow named “Upstream watch”. It runs every Monday at 07:00 UTC and by hand, since nothing in a pull request can change what it checks.1 Its one job, cis-pages, reads the checkout and holds issues: write. It runs scripts/check_upstream_release.py on the runner’s Python and gives it no token. On a finding, .github/scripts/report-issue.sh opens the issue titled “Upstream watch: the CIS Controls have changed” or comments on the open one. Update the upstream pins says what each finding asks for.

Footnotes

Section titled “Footnotes”

  1. .github/workflows/upstream-watch.yaml, the header comment, the on key and the jobs ↩