From d1a03b5221b5ae50c1f89c845ca18673cdbf0da4 Mon Sep 17 00:00:00 2001
From: Jason Karns <jason.karns@gmail.com>
Date: Wed, 20 Aug 2025 10:09:32 -0400
Subject: [PATCH 1/3] Use reusable test workflow

---
 .github/workflows/test.yml  | 12 ++++++++++++
 .github/workflows/tests.yml | 27 ---------------------------
 2 files changed, 12 insertions(+), 27 deletions(-)
 create mode 100644 .github/workflows/test.yml
 delete mode 100644 .github/workflows/tests.yml

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
new file mode 100644
index 0000000..be16c1c
--- /dev/null
+++ b/.github/workflows/test.yml
@@ -0,0 +1,12 @@
+name: Test
+on:
+  push:
+  pull_request:
+  schedule: [{ cron: "0 0 10 * *" }] # monthly https://crontab.guru/#0_0_10_*_*
+  workflow_dispatch:
+
+permissions: {}
+jobs:
+  test:
+    uses: bats-core/.github/.github/workflows/test.yml@v1
+    permissions: { contents: read }
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
deleted file mode 100644
index 097283b..0000000
--- a/.github/workflows/tests.yml
+++ /dev/null
@@ -1,27 +0,0 @@
-# This workflow will do a clean install of node dependencies, cache/restore them, build the source code and run tests across different versions of node
-# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
-
-name: Tests
-
-on:
-  push:
-    branches: [ master ]
-  pull_request:
-    branches: [ master ]
-
-jobs:
-  build:
-
-    runs-on: ubuntu-latest
-
-    steps:
-    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
-    - uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2
-    - uses: actions/cache@8492260343ad570701412c2f464a5877dc76bace # v2
-      with:
-        path: ~/.npm
-        key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
-        restore-keys: |
-          ${{ runner.os }}-node-
-    - run: npm install
-    - run: npm test

From e74879fc49379e6640da9125d403eb6b3a85c96d Mon Sep 17 00:00:00 2001
From: Jason Karns <jason.karns@gmail.com>
Date: Wed, 20 Aug 2025 10:14:41 -0400
Subject: [PATCH 2/3] Run on edge until next release

---
 .github/workflows/test.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index be16c1c..189054b 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -8,5 +8,5 @@ on:
 permissions: {}
 jobs:
   test:
-    uses: bats-core/.github/.github/workflows/test.yml@v1
+    uses: bats-core/.github/.github/workflows/test.yml@main
     permissions: { contents: read }

From 278a1924d54f4a7e90c91a4ac66f377094c86b06 Mon Sep 17 00:00:00 2001
From: Jason Karns <jason.karns@gmail.com>
Date: Wed, 20 Aug 2025 11:12:47 -0400
Subject: [PATCH 3/3] Need more permissions for OSSF scorecard job

---
 .github/workflows/test.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 189054b..74ac693 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -9,4 +9,7 @@ permissions: {}
 jobs:
   test:
     uses: bats-core/.github/.github/workflows/test.yml@main
-    permissions: { contents: read }
+    permissions:
+      contents: read
+      security-events: write
+      id-token: write